Lucene search
+L

238 matches found

OSV
OSV
•added 2021/02/19 4:15 p.m.•17 views

CVE-2021-22703

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor intercepts HTT...

7.5CVSS7.1AI score0.00599EPSS
SaveExploits0References1
NVD
NVD
•added 2021/02/19 4:15 p.m.•33 views

CVE-2021-22702

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor...

7.5CVSS0.00592EPSS
SaveExploits0References1
NVD
NVD
•added 2021/02/19 4:15 p.m.•41 views

CVE-2021-22703

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor intercepts HTT...

7.5CVSS0.00599EPSS
SaveExploits0References1
OSV
OSV
•added 2021/02/19 4:15 p.m.•15 views

CVE-2021-22701

A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause a user to perform an unintended action on the target device when using the HTTP web...

4.5CVSS5.8AI score0.00335EPSS
SaveExploits0References1
NVD
NVD
•added 2021/02/19 4:15 p.m.•38 views

CVE-2021-22701

A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause a user to perform an unintended action on the target device when using the HTTP web...

6.1CVSS0.00335EPSS
SaveExploits0References1
Prion
Prion
•added 2021/02/19 4:15 p.m.•29 views

Cross site request forgery (csrf)

A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause a user to perform an unintended action on the target device when using the HTTP web...

3.5CVSS4.7AI score0.00335EPSS
SaveExploits0References1Affected Software4
Prion
Prion
•added 2021/02/19 4:15 p.m.•28 views

Design/Logic Flaw

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor...

5CVSS7.3AI score0.00592EPSS
SaveExploits0References1Affected Software4
Prion
Prion
•added 2021/02/19 4:15 p.m.•28 views

Design/Logic Flaw

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor intercepts HTT...

5CVSS7.3AI score0.00599EPSS
SaveExploits0References1Affected Software4
attackerkb
attackerkb
•added 2021/02/19 4:15 p.m.•12 views

CVE-2021-22703

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor intercepts HTT...

7.5CVSS7AI score0.00599EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/02/19 4:15 p.m.•11 views

CVE-2021-22702

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor...

7.5CVSS7AI score0.00592EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/02/19 4:15 p.m.•9 views

CVE-2021-22701

A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause a user to perform an unintended action on the target device when using the HTTP web...

6.1CVSS6AI score0.00335EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/02/19 3:15 p.m.•49 views

CVE-2021-22701

A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause a user to perform an unintended action on the target device when using the HTTP web...

5AI score0.00335EPSS
SaveExploits0References1
CVE
CVE
•added 2021/02/19 3:15 p.m.•93 views

CVE-2021-22701

CVE-2021-22701 affects Schneider Electric PowerLogic devices: ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800. The vulnerability is a Cross-Site Request Forgery (CSRF) in the HTTP web interface, enabling an attacker to induce unintended actions on the target device. ...

4.5CVSS4.7AI score0.00335EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/02/19 3:14 p.m.•45 views

CVE-2021-22703

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor intercepts HTT...

7.5AI score0.00599EPSS
SaveExploits0References1
CVE
CVE
•added 2021/02/19 3:14 p.m.•76 views

CVE-2021-22703

CVE-2021-22703 affects Schneider Electric PowerLogic devices: ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800. The issue is CWE-319 Cleartext transmission of sensitive information, enabling disclosure of user credentials if an attacker intercepts HTTP traffic between...

7.5CVSS7.3AI score0.00599EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/02/19 3:13 p.m.•44 views

CVE-2021-22702

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor...

7.5AI score0.00592EPSS
SaveExploits0References1
CVE
CVE
•added 2021/02/19 3:13 p.m.•70 views

CVE-2021-22702

CVE-2021-22702 affects Schneider Electric PowerLogic devices (ION7400/7650/7700-73xx/83xx-84xx-85xx/8600, ION8650, ION8800, ION9000 and PM800). Root cause: cleartext transmission of sensitive information via Telnet, exposing credentials if an attacker eavesdrops network traffic. Documented impact...

7.5CVSS7.2AI score0.00592EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2021/02/19 3:13 p.m.•12 views

CVE-2021-22702

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor...

7.1AI score0.00592EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/02/19 12:00 a.m.•20 views

Schneider PowerLogic Product Information Disclosure Vulnerability

Schneider PowerLogic is an industrial control device from Schneider China. Provides increased power factor to improve power quality and troubleshoot power failures to protect networks, devices and operators. An information disclosure vulnerability exists in multiple Schneider PowerLogic products...

7.5CVSS7.1AI score0.00592EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/02/19 12:00 a.m.•19 views

Schneider PowerLogic Product Information Disclosure Vulnerability

Schneider PowerLogic is an industrial control device from Schneider China. Provides increased power factor to improve power quality and troubleshoot power failures to protect networks, devices and operators. An information disclosure vulnerability exists in multiple Schneider PowerLogic products...

7.5CVSS7.1AI score0.00599EPSS
SaveExploits0References2
Rows per page
Query Builder