PT-2021-3898 · Schneider Electric · Powerlogic Ion84Xx+10

Published 2021-02-09 · Updated 2026-05-29 · CVE-2021-22702

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (affected versions not specified)

Description A Cleartext transmission of sensitive information issue exists, which could cause disclosure of user credentials when a malicious actor intercepts Telnet network traffic between a user and the device. This is due to the lack of protection for transmitted data, allowing a remote attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

BDU:2021-04330

CVE-2021-22702

Affected Products

Pm800

Powerlogic Ion7400

Powerlogic Ion7650

Powerlogic Ion7700

Powerlogic Ion83Xx

Powerlogic Ion84Xx

Powerlogic Ion85Xx

Powerlogic Ion8600

Powerlogic Ion8650

Powerlogic Ion8800

Powerlogic Ion9000

References · 8

• https://osv.dev/vulnerability/CVE-2021-22702 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22702 · Security Note
• https://se.com/ww/en/download/document/SEVD-2021-040-01 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04330 · Security Note
• https://t.me/cibsecurity/23866 · Telegram Post
• https://t.me/cveNotify/165198 · Telegram Post
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2021-040-01_PowerLogic_Power_Metering_Security_Notification.pdf&p_Doc_Ref=SEVD-2021-040-01 · Note
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2021-040-01_PowerLogic_Power_Metering_Security_Notification.pdf&p_Doc_Ref=SEVD-2021-040-01 · Note