What’s Vulnerable › Vulnerabilities

CVE-2016-5815

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-02-13 · updated 2026-06-17
• Weakness: CWE-284

Description

An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 series, and PM5XXX series. No authentication is configured by default. An unauthorized user can access the device management portal and make configuration changes.

Affected products

• Schneider-Electric Ion5000: all versions
• Schneider-Electric Ion7300: all versions
• Schneider-Electric Ion7500: all versions
• Schneider-Electric Ion7600: all versions
• Schneider Electric ION8650: all versions
• Schneider Electric ION8800: all versions

References

• http://www.securityfocus.com/bid/94091
• https://ics-cert.us-cert.gov/advisories/ICSA-16-308-03
• http://www.securityfocus.com/bid/94091
• https://ics-cert.us-cert.gov/advisories/ICSA-16-308-03

Get alerted when CVE-2016-5815 or the next vulnerability affects your stack