Back
CVE-2022-46680
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information,…
High8.8EPSS 0.38%
- Published
- Updated
- Reserved
- Assigned by
- schneider
Description
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| schneiderCNA (assigner) | 3.1 | High8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.38% · top 68% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: yes · Technical impact: total
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.
Weakness
Affected products
Schneider Electric · PowerLogic ION9000
- affected Prior to 4.0.0
Schneider Electric · PowerLogic ION7400
- affected Prior to 4.0.0
Schneider Electric · PowerLogic PM8000
- affected Prior to 4.0.0
Schneider Electric · PowerLogic ION8650
- affected All Versions
Schneider Electric · PowerLogic ION8800
- affected All Versions
Schneider Electric · Legacy ION products
- affected All Versions
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-46680)Record last updated .