PT-2021-3890 · Schneider Electric · Powerlogic Ion7400+2

Published 2021-03-09 · Updated 2022-02-03 · CVE-2021-22714

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PowerLogic ION7400 versions prior to V3.0.0 PowerLogic PM8000 versions prior to V3.0.0 PowerLogic ION9000 versions prior to V3.0.0

Description The issue is related to a buffer overflow in the memory, which could allow a remote attacker to cause the device to reboot or execute arbitrary code. This is due to an improper restriction of operations within the bounds of a memory buffer.

Recommendations For PowerLogic ION7400 versions prior to V3.0.0, update to version V3.0.0 or later to resolve the issue. For PowerLogic PM8000 versions prior to V3.0.0, update to version V3.0.0 or later to resolve the issue. For PowerLogic ION9000 versions prior to V3.0.0, update to version V3.0.0 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2021-04271

CVE-2021-22714

Affected Products

Powerlogic Ion7400

Powerlogic Ion9000

Powerlogic Pm8000

References · 8

• https://bdu.fstec.ru/vul/2021-04271 · Security Note
• https://se.com/ww/en/download/document/SEVD-2021-068-02 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-22714 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22714 · Security Note
• https://t.me/cvenotify/20254 · Telegram Post
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2021-068-02_PowerLogic_ION7400_PM8000_ION9000_Power_Meters_Security_Notification.pdf&p_Doc_Ref=SEVD-2021-068-02 · Note
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2021-068-02_PowerLogic_ION7400_PM8000_ION9000_Power_Meters_Security_Notification.pdf&p_Doc_Ref=SEVD-2021-068-02 · Note
• https://t.me/cibsecurity/24819 · Telegram Post