CVE-2021-22714

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-03-11 · updated 2026-06-17
Weakness: CWE-119

Description

A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION7400, PM8000 and ION9000 (All versions prior to V3.0.0), which could cause the meter to reboot or allow for remote code execution.

Affected products

Schneider-Electric Powerlogic Ion7400 Firmware: before 3.0.0 — fixed in 3.0.0
Schneider-Electric Powerlogic Ion9000 Firmware: before 3.0.0 — fixed in 3.0.0
Schneider-Electric Powerlogic Pm8000 Firmware: before 3.0.0 — fixed in 3.0.0

How to fix

Upgrade to a fixed version: Schneider-Electric Powerlogic Ion7400 Firmware 3.0.0; Schneider-Electric Powerlogic Ion9000 Firmware 3.0.0; Schneider-Electric Powerlogic Pm8000 Firmware 3.0.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-22714 or the next vulnerability affects your stack