CVE-2021-22701: Schneider Electric Powerlogic ION7400 Firmware

Medium severity, CVSS 4.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause a user to perform an unintended action on the target device when using the HTTP web interface.

Affected products

• Schneider Electric Powerlogic ION7400 Firmware: before 3.0.0 (fixed in 3.0.0)
• Schneider Electric Powerlogic ION7650 Firmware: any version
• Schneider Electric Powerlogic ION8300 Firmware: any version
• Schneider Electric Powerlogic ION8400 Firmware: any version
• Schneider Electric Powerlogic ION8500 Firmware: any version
• Schneider Electric Powerlogic ION8600 Firmware: any version
• Schneider Electric Powerlogic ION8650 Firmware: up to and including 4.31.2
• Schneider Electric Powerlogic ION8800 Firmware: any version
• Schneider Electric Powerlogic ION9000 Firmware: before 3.0.0 (fixed in 3.0.0)
• Schneider Electric Powerlogic PM8000 Firmware: before 3.0.0 (fixed in 3.0.0)

Published 2021-02-19. Last modified 2026-06-17.