Schneider Electric’s ION and PowerLogic power meters are being affected by a high-severity vulnerability, tracked as CVE-2022-46680, which could be leveraged to obtain credential access and facilitate configuration setting and firmware modifications, according to The Record, a news site by cybersecurity firm Recorded Future. Such a vulnerability is the last of the 56 operational technology flaws revealed by Forescout as part of its OT:ICEFALL disclosures last year, with the deferral requested by Schneider Electric as it sought to remediate the bug, said Forescout Head of Security Research Daniel dos Santos.

Source: SC Magazine