CVE-2021-22703
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts HTTP network traffic between a user and the device.
Una CWE-319: Se presenta una vulnerabilidad de transmisión de información confidencial en texto sin cifrar en PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 y PM800 (consulte la notificación para las versiones afectadas), que podría causar una divulgación de las credenciales del usuario cuando un actor malicioso intercepta el tráfico de red HTTP entre un usuario y el dispositivo
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-01-06 CVE Reserved
- 2021-02-19 CVE Published
- 2023-11-05 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-319: Cleartext Transmission of Sensitive Information
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.se.com/ww/en/download/document/SEVD-2021-040-01 | 2022-02-03 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion7400 Firmware Search vendor "Schneider-electric" for product "Powerlogic Ion7400 Firmware" | < 3.0.0 Search vendor "Schneider-electric" for product "Powerlogic Ion7400 Firmware" and version " < 3.0.0" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion7400 Search vendor "Schneider-electric" for product "Powerlogic Ion7400" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion7650 Firmware Search vendor "Schneider-electric" for product "Powerlogic Ion7650 Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion7650 Search vendor "Schneider-electric" for product "Powerlogic Ion7650" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion8600 Firmware Search vendor "Schneider-electric" for product "Powerlogic Ion8600 Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion8600 Search vendor "Schneider-electric" for product "Powerlogic Ion8600" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion8650 Firmware Search vendor "Schneider-electric" for product "Powerlogic Ion8650 Firmware" | <= 4.31.2 Search vendor "Schneider-electric" for product "Powerlogic Ion8650 Firmware" and version " <= 4.31.2" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion8650 Search vendor "Schneider-electric" for product "Powerlogic Ion8650" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion8800 Firmware Search vendor "Schneider-electric" for product "Powerlogic Ion8800 Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion8800 Search vendor "Schneider-electric" for product "Powerlogic Ion8800" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion9000 Firmware Search vendor "Schneider-electric" for product "Powerlogic Ion9000 Firmware" | < 3.0.0 Search vendor "Schneider-electric" for product "Powerlogic Ion9000 Firmware" and version " < 3.0.0" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion9000 Search vendor "Schneider-electric" for product "Powerlogic Ion9000" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Powerlogic Pm8000 Firmware Search vendor "Schneider-electric" for product "Powerlogic Pm8000 Firmware" | < 3.0.0 Search vendor "Schneider-electric" for product "Powerlogic Pm8000 Firmware" and version " < 3.0.0" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Powerlogic Pm8000 Search vendor "Schneider-electric" for product "Powerlogic Pm8000" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion8300 Firmware Search vendor "Schneider-electric" for product "Powerlogic Ion8300 Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion8300 Search vendor "Schneider-electric" for product "Powerlogic Ion8300" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion8400 Firmware Search vendor "Schneider-electric" for product "Powerlogic Ion8400 Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion8400 Search vendor "Schneider-electric" for product "Powerlogic Ion8400" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion8500 Firmware Search vendor "Schneider-electric" for product "Powerlogic Ion8500 Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Powerlogic Ion8500 Search vendor "Schneider-electric" for product "Powerlogic Ion8500" | - | - |
Safe
|