CVE-2021-22713

A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions), which could cause the meter to reboot.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
schneiderCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
VendorProductVersion
schneider-electricpowerlogic_ion8650_firmware
𝑥
< 4.40.1
schneider-electricpowerlogic_ion8800_firmware
𝑥
< 372
schneider-electricpowerlogic_ion7550_firmware
𝑥
< 376
schneider-electricpowerlogic_ion7650_firmware
𝑥
< 376
schneider-electricpowerlogic_ion7700_firmware
*
schneider-electricpowerlogic_ion7300_firmware
*
schneider-electricpowerlogic_ion8300_firmware
*
schneider-electricpowerlogic_ion8400_firmware
*
schneider-electricpowerlogic_ion8500_firmware
*
schneider-electricpowerlogic_ion8600_firmware
*
schneider-electricpowerlogic_ion7550_firmware
𝑥
< 416
schneider-electricion7650_firmware
𝑥
< 416
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.se.com/ww/en/download/document/SEVD-2021-068-03
https://www.se.com/ww/en/download/document/SEVD-2021-068-03