CVE-2022-46680
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause...
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.
- Record
CVE-2022-46680- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-319
- Updated
- 2026-11-02
EUVDEUVD-2022-49476
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.
- Record
EUVD-2022-49476- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fhxw-qvv7-c595
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause...
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.
- Record
GHSA-fhxw-qvv7-c595- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-319
- Updated
- 2026-11-02
NVD
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.
- Record
CVE-2022-46680- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-319
- Updated
- 2026-11-02
Affected products
- schneider electric legacy ion products
- schneider electric powerlogic ion7400
- schneider electric powerlogic ion8650
- schneider electric powerlogic ion8800
- schneider electric powerlogic ion9000
- schneider electric powerlogic pm8000
- schneider-electric powerlogic ion7400 firmware
- schneider-electric powerlogic ion8650 firmware
- schneider-electric powerlogic ion8800 firmware
- schneider-electric powerlogic ion9000 firmware
- schneider-electric powerlogic pm8000 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-46680 is a high vulnerability (CVSS 8.8) in Schneider Electric Legacy Ion Products, published May 22, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. No source names a fixed version.