A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.

A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.

A cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.

Schneider Electric is aware of the use of an unsecure protocol in its PowerLogic ION9000, PowerLogic ION7400, PowerLogic PM8000, PowerLogic ION8650, PowerLogic ION8800 and all legacy ION products. The PowerLogic ION9000, PowerLogic ION7400, PowerLogic PM8000, PowerLogic ION8650 and PowerLogic ION8800 are energy and power quality meters. This disclosure announces the new secure ION protocol feature for the PowerLogic ION9000, ION7400 and PM8000 products. Secure ION enhances the security of the ION protocol by using a Transport Layer Security (TLS) encrypted tunnel between the device and other systems or software