CVE:CVE-2021-22703
CNNVD:CNNVD-202102-1425
Schneider PowerLogic是中国Schneider公司的一个工控设备。提供提高功率因数来提高电源质量，排除电源故障，从而保护网络、装置和操作员。
多款 Schneider PowerLogic 产品中存在信息泄露漏洞。该漏洞源于系统中中存在敏感信息的明文传输，当恶意参与者截获用户和设备之间的HTTP网络流量时。该漏洞可能导致用户凭据泄露。以下产品及版本受到影响：PowerLogic ION7400、PowerLogic ION7650、PowerLogic ION83xx/84xx/85xx/8600、PowerLogic ION8650、PowerLogic ION8800、PowerLogic ION9000、PowerLogic PM800。
solution:Upgrade schneider-electric powerlogic_ion7400_firmware to a higher version than 3.0.0,and avoid the version (,3.0.0); Upgrade schneider-electric powerlogic_ion7650_firmware to a higher version than *; Upgrade schneider-electric powerlogic_ion8600_firmware to a higher version than *; Upgrade schneider-electric powerlogic_ion8650_firmware to a higher version than 4.31.2,and avoid the version (,4.31.2]; Upgrade schneider-electric powerlogic_ion8800_firmware to a higher version than *; Upgrade schneider-electric powerlogic_ion9000_firmware to a higher version than 3.0.0,and avoid the version (,3.0.0); Upgrade schneider-electric powerlogic_pm8000_firmware to a higher version than 3.0.0,and avoid the version (,3.0.0); Upgrade schneider-electric powerlogic_ion8300_firmware to a higher version than *; Upgrade schneider-electric powerlogic_ion8400_firmware to a higher version than *; Upgrade schneider-electric powerlogic_ion8500_firmware to a higher version than *