CVE-2021-22713 HIGH

Published: 2021-03-11 | Last Modified: 2026-05-29 | Status: Modified

Description

A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions), which could cause the meter to reboot.

Additional Descriptions (1)

A CWE-119: se presenta vulnerabilidad de Restricción Inapropiada de Operaciones dentro de los Límites de un Búfer de la Memoria en PowerLogic ION8650, ION8800, ION7650, ION7700 /73xx e ION83xx /84xx/85xx /8600 (consulte la notificación de seguridad para las versiones afectadas), lo que podría causar al medidor reiniciarse

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 7.8 (HIGH)

AV:N/AC:L/Au:N/C:N/I:N/A:C

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	COMPLETE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 6.9

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-119

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	powerlogic_ion8650_firmware	*	<built-in method update of dict object at 0x7e60a8be7e00>	Operating System
schneider-electric	powerlogic_ion8800_firmware	*	<built-in method update of dict object at 0x7e60ba2a5fc0>	Operating System
schneider-electric	powerlogic_ion7550_firmware	*	<built-in method update of dict object at 0x7e60b9fb4340>	Operating System
schneider-electric	powerlogic_ion7650_firmware	*	<built-in method update of dict object at 0x7e60a8be5600>	Operating System
schneider-electric	powerlogic_ion7700_firmware	*	<built-in method update of dict object at 0x7e60a8be7780>	Operating System
schneider-electric	powerlogic_ion7300_firmware	*	<built-in method update of dict object at 0x7e60a8be7600>	Operating System
schneider-electric	powerlogic_ion8300_firmware	*	<built-in method update of dict object at 0x7e60b9fb4640>	Operating System
schneider-electric	powerlogic_ion8400_firmware	*	<built-in method update of dict object at 0x7e61342cf0c0>	Operating System
schneider-electric	powerlogic_ion8500_firmware	*	<built-in method update of dict object at 0x7e61342ceb80>	Operating System
schneider-electric	powerlogic_ion8600_firmware	*	<built-in method update of dict object at 0x7e60a8be58c0>	Operating System
schneider-electric	powerlogic_ion7550_firmware	*	<built-in method update of dict object at 0x7e60b9fb7d80>	Operating System
schneider-electric	ion7650_firmware	*	<built-in method update of dict object at 0x7e60ba2a4b00>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:powerlogic_ion8650_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:powerlogic_ion8650:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:powerlogic_ion8800_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:powerlogic_ion8800:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:powerlogic_ion7550_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:powerlogic_ion7550:4.0:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:powerlogic_ion7650_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:powerlogic_ion7650:4.0:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:powerlogic_ion7700_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:powerlogic_ion7700:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:powerlogic_ion7300_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:powerlogic_ion7300:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:powerlogic_ion8300_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:powerlogic_ion8300:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:powerlogic_ion8400_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:powerlogic_ion8400:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:powerlogic_ion8500_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:powerlogic_ion8500:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:powerlogic_ion8600_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:powerlogic_ion8600:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:powerlogic_ion7550_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:powerlogic_ion7550:5.0:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:ion7650_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:powerlogic_ion7650:5.0:::::::*`

References

https://www.se.com/ww/en/download/document/SEVD-2021-068-03
Source: [email protected]

Vendor Advisory
https://www.se.com/ww/en/download/document/SEVD-2021-068-03
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory