CVE-2021-22703: Schneider Electric Powerlogic ION7400 Firmware

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts HTTP network traffic between a user and the device.

Affected products

• Schneider Electric Powerlogic ION7400 Firmware: before 3.0.0 (fixed in 3.0.0)
• Schneider Electric Powerlogic ION7650 Firmware: any version
• Schneider Electric Powerlogic ION8300 Firmware: any version
• Schneider Electric Powerlogic ION8400 Firmware: any version
• Schneider Electric Powerlogic ION8500 Firmware: any version
• Schneider Electric Powerlogic ION8600 Firmware: any version
• Schneider Electric Powerlogic ION8650 Firmware: up to and including 4.31.2
• Schneider Electric Powerlogic ION8800 Firmware: any version
• Schneider Electric Powerlogic ION9000 Firmware: before 3.0.0 (fixed in 3.0.0)
• Schneider Electric Powerlogic PM8000 Firmware: before 3.0.0 (fixed in 3.0.0)

Published 2021-02-19. Last modified 2026-06-17.