Improper Memory Buffer Restriction in PowerLogic Meters by Schneider Electric

CVE-2021-22714

Summary

A vulnerability exists in Schneider Electric's PowerLogic ION7400, PM8000, and ION9000 meters, affecting all versions prior to V3.0.0. This flaw involves an improper restriction of operations within the bounds of a memory buffer, potentially allowing an attacker to exploit this weakness. The exploitation may lead to unexpected device reboots or even enable remote code execution, raising significant concerns for device integrity and security in industrial settings.

References