description:
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could
cause disclosure of sensitive information, denial of service, or modification of data if an attacker
is able to intercept network traffic.
problem types: CWE-319 Cleartext Transmission of Sensitive Information
affected:
{
defaultStatus: unaffected
product: PowerLogic ION9000
vendor: Schneider Electric
versions:
status: affected, version: Prior to 4.0.0
}
{
defaultStatus: unaffected
product: PowerLogic ION7400
vendor: Schneider Electric
versions:
status: affected, version: Prior to 4.0.0
}
{
defaultStatus: unaffected
product:  PowerLogic PM8000
vendor: Schneider Electric
versions:
status: affected, version: Prior to 4.0.0
}
{
defaultStatus: unaffected
product: PowerLogic ION8650
vendor: Schneider Electric
versions:
status: affected, version: All Versions
}
{
defaultStatus: unaffected
product: PowerLogic ION8800
vendor: Schneider Electric
versions:
status: affected, version: All Versions
}
{
defaultStatus: unaffected
product: Legacy ION products
vendor: Schneider Electric
versions:
status: affected, version: All Versions
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL