CVE-2021-22713

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-22713
A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions), which could cause the meter to reboot.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References
Link Resource
https://www.se.com/ww/en/download/document/SEVD-2021-068-03 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:schneider-electric:powerlogic_ion8650_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion8650:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:schneider-electric:powerlogic_ion8800_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion8800:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:schneider-electric:powerlogic_ion7550_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion7550:4.0:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:schneider-electric:powerlogic_ion7650_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion7650:4.0:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:schneider-electric:powerlogic_ion7700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion7700:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:schneider-electric:powerlogic_ion7300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion7300:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:schneider-electric:powerlogic_ion8300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion8300:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:schneider-electric:powerlogic_ion8400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion8400:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:schneider-electric:powerlogic_ion8500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion8500:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:schneider-electric:powerlogic_ion8600_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion8600:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:schneider-electric:powerlogic_ion7550_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion7550:5.0:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:schneider-electric:ion7650_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion7650:5.0:*:*:*:*:*:*:*
History

03 Feb 2022, 16:23

Type Values Removed Values Added
CPE cpe:2.3:o:se:powerlogic_ion8800_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion8500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion8300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion7650_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion8600_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:ion7650_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion8400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion7550_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion8650_firmware:*:*:*:*:*:*:*:*		 cpe:2.3:o:schneider-electric:powerlogic_ion7550_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:powerlogic_ion8600_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:powerlogic_ion8500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:powerlogic_ion8400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:powerlogic_ion8650_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:powerlogic_ion7650_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:powerlogic_ion8300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:powerlogic_ion8800_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:ion7650_firmware:*:*:*:*:*:*:*:*

31 Jan 2022, 20:07

Type Values Removed Values Added
CPE cpe:2.3:h:se:powerlogic_ion8800:-:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion7650:4.0:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion7300:-:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion7700:-:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion7550:5.0:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion7650:5.0:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion8500:-:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion8650:-:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion8600:-:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion7550:4.0:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion7700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion7300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion8300:-:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion8400:-:*:*:*:*:*:*:*		 cpe:2.3:h:schneider-electric:powerlogic_ion8400:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion7300:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion8600:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion8300:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion7650:4.0:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion7700:-:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:powerlogic_ion7300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion8500:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion7650:5.0:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion7550:4.0:*:*:*:*:*:*:*
cpe:2.3:o:schneider-electric:powerlogic_ion7700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion8650:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion7550:5.0:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:powerlogic_ion8800:-:*:*:*:*:*:*:*

27 Aug 2021, 16:09

Type Values Removed Values Added
CPE cpe:2.3:h:se:ion8600:-:*:*:*:*:*:*:*
cpe:2.3:h:se:ion8400:-:*:*:*:*:*:*:*
cpe:2.3:o:se:ion8600_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:ion8300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:se:ion8500:-:*:*:*:*:*:*:*
cpe:2.3:o:se:ion8800_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:se:ion8650:-:*:*:*:*:*:*:*
cpe:2.3:h:se:ion8800:-:*:*:*:*:*:*:*
cpe:2.3:h:se:ion7550:4.0:*:*:*:*:*:*:*
cpe:2.3:h:se:ion7650:4.0:*:*:*:*:*:*:*
cpe:2.3:h:se:ion7300:-:*:*:*:*:*:*:*
cpe:2.3:h:se:ion7700:-:*:*:*:*:*:*:*
cpe:2.3:o:se:ion7700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:ion8400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:se:ion7650:5.0:*:*:*:*:*:*:*
cpe:2.3:o:se:ion7550_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:ion8500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:se:ion8300:-:*:*:*:*:*:*:*
cpe:2.3:o:se:ion7300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:se:ion7550:5.0:*:*:*:*:*:*:*
cpe:2.3:o:se:ion8650_firmware:*:*:*:*:*:*:*:*		 cpe:2.3:o:se:powerlogic_ion8500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion8300:-:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion8400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion8600_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion7550_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion7650:4.0:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion8300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion7300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion8650_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion8800:-:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion8800_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion8400:-:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion8600:-:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion7550:5.0:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion7300:-:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion7700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion7700:-:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion7550:4.0:*:*:*:*:*:*:*
cpe:2.3:o:se:powerlogic_ion7650_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion8650:-:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion8500:-:*:*:*:*:*:*:*
cpe:2.3:h:se:powerlogic_ion7650:5.0:*:*:*:*:*:*:*
Information

Published : 2021-03-11 21:15

Updated : 2024-02-04 21:23

NVD link : CVE-2021-22713

Mitre link : CVE-2021-22713

CVE.ORG link : CVE-2021-22713

JSON object : View

Products Affected

schneider-electric

  • powerlogic_ion7700_firmware
  • powerlogic_ion7550
  • powerlogic_ion8600_firmware
  • powerlogic_ion8650
  • powerlogic_ion8400_firmware
  • powerlogic_ion8600
  • ion7650_firmware
  • powerlogic_ion7700
  • powerlogic_ion7300
  • powerlogic_ion7550_firmware
  • powerlogic_ion8800
  • powerlogic_ion8650_firmware
  • powerlogic_ion7300_firmware
  • powerlogic_ion8300
  • powerlogic_ion7650
  • powerlogic_ion8400
  • powerlogic_ion7650_firmware
  • powerlogic_ion8500
  • powerlogic_ion8800_firmware
  • powerlogic_ion8500_firmware
  • powerlogic_ion8300_firmware
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer