CVE-2022-30232

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-02 · updated 2026-06-17
Weakness: CWE-20

Description

A CWE-20: Improper Input Validation vulnerability exists that could cause potential remote code execution when an attacker is able to intercept and modify a request on the same network or has configuration access to an ION device on the network. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)

Affected products

Schneider Electric Power Logic ION Setup: before 3.2.22096.01 — fixed in 3.2.22096.01

How to fix

Upgrade to a fixed version: Schneider Electric Power Logic ION Setup 3.2.22096.01. Check the vendor advisory for mitigations.

References

https://www.se.com/ww/en/download/document/SEVD-2022-130-01/
https://www.se.com/ww/en/download/document/SEVD-2022-130-01/

Get alerted when CVE-2022-30232 or the next vulnerability affects your stack