What’s Vulnerable › Vulnerabilities

CVE-2021-22713

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-03-11 · updated 2026-06-17
• Weakness: CWE-119

Description

A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions), which could cause the meter to reboot.

Affected products

• Schneider-Electric Ion7650 Firmware: before 416 — fixed in 416
• Schneider-Electric Powerlogic Ion7300 Firmware: all versions
• Schneider-Electric Powerlogic Ion7550 Firmware: before 376; before 416 — fixed in 376, 416
• Schneider-Electric Powerlogic Ion7650 Firmware: before 376 — fixed in 376
• Schneider-Electric Powerlogic Ion7700 Firmware: all versions
• Schneider-Electric Powerlogic Ion8300 Firmware: all versions
• Schneider-Electric Powerlogic Ion8400 Firmware: all versions
• Schneider-Electric Powerlogic Ion8500 Firmware: all versions
• Schneider-Electric Powerlogic Ion8600 Firmware: all versions
• Schneider-Electric Powerlogic Ion8650 Firmware: before 4.40.1 — fixed in 4.40.1
• Schneider-Electric Powerlogic Ion8800 Firmware: before 372 — fixed in 372

How to fix

Upgrade to a fixed version: Schneider-Electric Ion7650 Firmware 416; Schneider-Electric Powerlogic Ion7550 Firmware 376, 416; Schneider-Electric Powerlogic Ion7650 Firmware 376; Schneider-Electric Powerlogic Ion8650 Firmware 4.40.1; Schneider-Electric Powerlogic Ion8800 Firmware 372. Check the vendor advisory for mitigations.

References

• https://www.se.com/ww/en/download/document/SEVD-2021-068-03
• https://www.se.com/ww/en/download/document/SEVD-2021-068-03

Get alerted when CVE-2021-22713 or the next vulnerability affects your stack