{"vulnerability": "cve-2021-2271", "sightings": [{"uuid": "abab263c-efc5-4e56-bc19-928263584af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22711", "type": "seen", "source": "https://t.me/cibsecurity/24827", "content": "\u203c CVE-2021-22711 \u203c\n\nA CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could result in arbitrary read or write conditions when malicious CGF (Configuration Group File) file is imported to IGSS Definition due to missing validation of input data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-12T00:54:58.000000Z"}, {"uuid": "1ec869cc-3946-4e08-9783-9d94620196aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22713", "type": "seen", "source": "https://t.me/cibsecurity/24823", "content": "\u203c CVE-2021-22713 \u203c\n\nA CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions), which could cause the meter to reboot.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-12T00:54:51.000000Z"}, {"uuid": "f76a5a4f-b2bd-4e69-87d7-869f108ae3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22712", "type": "seen", "source": "https://t.me/cibsecurity/24820", "content": "\u203c CVE-2021-22712 \u203c\n\nA CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could result in arbitrary read or write conditions when malicious CGF (Configuration Group File) file is imported to IGSS Definition due to an unchecked pointer address.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-12T00:54:45.000000Z"}, {"uuid": "85bdd860-d03c-472a-b38b-65da72e511d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22714", "type": "seen", "source": "https://t.me/cibsecurity/24819", "content": "\u203c CVE-2021-22714 \u203c\n\nA CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION7400, PM8000 and ION9000 (All versions prior to V3.0.0), which could cause the meter to reboot or allow for remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-12T00:54:44.000000Z"}, {"uuid": "a8d51daf-b406-4ab1-85aa-e2c5a5556fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22710", "type": "seen", "source": "https://t.me/cibsecurity/24818", "content": "\u203c CVE-2021-22710 \u203c\n\nA CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could cause remote code execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-12T00:54:43.000000Z"}, {"uuid": "76c15268-869f-4e66-8072-f1fbf93cb42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22714", "type": "seen", "source": "https://t.me/hacking_Attack/958", "content": "Black Hat Ethical Hacking\nCritical Security Hole Can Knock Smart Meters Offline\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Critical Security Hole Can Knock Smart Meters OfflinePost Views: 60 \nstyle=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> \nReading Time: 1 Minute\nCritical security vulnerabilities in Schneider Electric smart meters could allow an attacker a path to remote code execution (RCE), or to reboot the meter causing a denial-of-service (DoS) condition on the device.\nSchneider Electric\u2019s PowerLogic ION/PM smart meter product line, like other smart meters, is used by consumers in their homes, but also by utility companies that deploy these meters in order to monitor and bill customers for their services. They\u2019re also used by industrial companies, data centers and healthcare companies.\n\nTwo vulnerabilities were disclosed this week, present in numerous versions of the products. According to Claroty, which originally found the flaws, they stem from the fact that the smart meters communicate using a proprietary ION protocol over TCP port 7700, and packets received by the device are parsed by a state machine function.\n\n\u201cWe found that it is possible to trigger [a pre-authentication integer-overflow vulnerability] during the packet-parsing process by the main state machine function by sending a crafted request,\u201d researchers said, in a blog posting this week. \u201cThis can be done without authentication because the request is fully parsed before it is handled or authentication is checked.\u201d\nSee Also: Linux Systems Under Attack By New RedXOR Malware We found that it is possible to trigger [a pre-authentication integer-overflow vulnerability] during the packet-parsing process by the main state machine function by sending a crafted request,\u201d researchers said, in a blog posting\u00a0this week. \u201cThis can be done without authentication because the request is fully parsed before it is handled or authentication is checked.\u201d\n\nThe function that parses the incoming packet reads the number of items or characters in the string or array and the buffer, which is a fixed size, researchers explained. They discovered that they were able to fully control the size of the buffer with a DWORD that is read from the request.\n\nhttps://media.threatpost.com/wp-content/uploads/sites/103/2021/03/12162345/PowerLogic-300x169.jpg \nThe Schneider Electric PM5000 series.\nA DWORD, which is short for \u201cdouble word,\u201d is a data type definition is an unsigned, 32-bit unit of data that is specific to Microsoft Windows. It can contain an integer value in the range 0 through 4,294,967,295.\n\n\u201cWe discovered a bug in the function that is responsible for advancing the parsing buffer, we named this function advance_buffer,\u201d according to Claroty\u2019s analysis. \u201cWe found that the advance_buffer function always returns true, regardless of other inner functions failing and returning false. Therefore, providing any large packet size will always pass the advance_buffer function without triggering an error message or exception. Thus, Claroty researchers were able to bypass buffer checks and reach exploitation.\u201d\nSee Also: Offensive Security Tool: Skipfish Two Exploitation Paths, Two BugsWhile researching the different firmware for the smart meters, researchers found that there are two different exploitation paths that arise from improper restriction of operations within a memory buffer, depending on the specific architecture. They reported these as two different vulnerabilities.\n\nThe bug tracked as CVE-2021-22714 rates 9.8 out of 10 on the CVSS vulnerability-severity scale.\n\n\u201cTh[...]", "creation_timestamp": "2026-09-01T20:02:50.673470Z"}, {"uuid": "2ea88cc6-9283-4118-afcb-67104d82abe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22713", "type": "seen", "source": "https://t.me/hacking_Attack/959", "content": "is vulnerability [is a] critical integer-overflow vulnerability that could enable an attacker to send a specially crafted TCP packet to the device to either cause it to reboot the meter or remotely run code of their choice, depending on the architecture of the targeted device,\u201d according to the advisory.\n\nSchneider Electric said the affected products include:\n\n* ION7400 (prior to V3.0.0)\n* ION9000 (prior to V3.0.0)\n* PM8000 (prior to V3.0.0)\n\nThe bug tracked as CVE-2021-22713 exists in a number of versions of the PowerLogic ION line of meters, but was assessed a CVSS score of 7.5 because successful exploitation of the versions does not enable remote code execution, and enables only an attacker to force the meter to reboot. See Also: Hacking Stories: Albert Gonzalez & the \u2018Get Rich or Die Trying\u2019 Crew who stole 130 million credit-card numbersThe list of affected products includes:\n\n* ION8650 (prior to V4.40.1)\n* ION8800 (prior to V372)\n* ION7650 Hardware rev. 4 or earlier (prior to V376)\n* ION7650 Hardware rev. 5 (prior to V416)\n* ION7700/73xx (all versions)\n* ION83xx/84xx/8600 (all versions)\n\nThe vulnerability was addressed in updates released in January and March, and users are urged to move to the patched versions:\n\n* ION8650 users should update to V4.40.1, released on Jan. 4\n* ION8800 users should update to V372, released on March 3\n* ION7650 Hardware rev. 4 or earlier should update to V376, released on March 3\n* ION7650 Hardware rev. 5 should update to V416, released on March 3\nSource: https://threatpost.com (Click Link)style=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Linux-kernel-vulnerability-90x90.png Linux Systems Under Attack By New RedXOR Malware3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/security-camera-90x90.jpg Breach Exposes Verkada Security Camera Footage at Tesla, Cloudflare4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/ezgif.com-gif-maker-1-90x90.jpg Apple\u2019s Device Location-Tracking System Could Expose User Identities5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/recaptcha-90x90.jpg Fake Google reCAPTCHA Phishing Attack Swipes Office 365 Passwords6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/botnet-90x90.jpg D-Link, IoT Devices Under Attack By Tor-Based Gafgyt Variant1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Google-Chrome-Browser-90x90.jpg Google Patches Actively Exploited Flaw in Chrome Browser1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/zero_day_bugs1-90x90.jpg Microsoft Exchange Zero-Day Attackers Spy on U.S. Targets2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/ObliqueRAT--90x90.jpg Compromised Website Images Camouflage ObliqueRAT Malware2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/how-hackers-may-be-hurting-your-seo-5e45656cd8c2e-760x400-1-90x90.png Hackers exploit websites to give them excellent SEO before deploying malware2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/FireFox-Browser-Extension-90x90.jpg Malicious Mozilla Firefox Extension Allows Gmail Takeover2 weeks ago\nThe post Critical Security Hole Can Knock Smart Meters Offline first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-01T20:02:50.718784Z"}, {"uuid": "5ede33a0-fb98-4169-a657-ad952148297b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22714", "type": "seen", "source": "https://t.me/hacking_Attack/958", "content": "Black Hat Ethical Hacking\nCritical Security Hole Can Knock Smart Meters Offline\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Critical Security Hole Can Knock Smart Meters OfflinePost Views: 60 \nstyle=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> \nReading Time: 1 Minute\nCritical security vulnerabilities in Schneider Electric smart meters could allow an attacker a path to remote code execution (RCE), or to reboot the meter causing a denial-of-service (DoS) condition on the device.\nSchneider Electric\u2019s PowerLogic ION/PM smart meter product line, like other smart meters, is used by consumers in their homes, but also by utility companies that deploy these meters in order to monitor and bill customers for their services. They\u2019re also used by industrial companies, data centers and healthcare companies.\n\nTwo vulnerabilities were disclosed this week, present in numerous versions of the products. According to Claroty, which originally found the flaws, they stem from the fact that the smart meters communicate using a proprietary ION protocol over TCP port 7700, and packets received by the device are parsed by a state machine function.\n\n\u201cWe found that it is possible to trigger [a pre-authentication integer-overflow vulnerability] during the packet-parsing process by the main state machine function by sending a crafted request,\u201d researchers said, in a blog posting this week. \u201cThis can be done without authentication because the request is fully parsed before it is handled or authentication is checked.\u201d\nSee Also: Linux Systems Under Attack By New RedXOR Malware We found that it is possible to trigger [a pre-authentication integer-overflow vulnerability] during the packet-parsing process by the main state machine function by sending a crafted request,\u201d researchers said, in a blog posting\u00a0this week. \u201cThis can be done without authentication because the request is fully parsed before it is handled or authentication is checked.\u201d\n\nThe function that parses the incoming packet reads the number of items or characters in the string or array and the buffer, which is a fixed size, researchers explained. They discovered that they were able to fully control the size of the buffer with a DWORD that is read from the request.\n\nhttps://media.threatpost.com/wp-content/uploads/sites/103/2021/03/12162345/PowerLogic-300x169.jpg \nThe Schneider Electric PM5000 series.\nA DWORD, which is short for \u201cdouble word,\u201d is a data type definition is an unsigned, 32-bit unit of data that is specific to Microsoft Windows. It can contain an integer value in the range 0 through 4,294,967,295.\n\n\u201cWe discovered a bug in the function that is responsible for advancing the parsing buffer, we named this function advance_buffer,\u201d according to Claroty\u2019s analysis. \u201cWe found that the advance_buffer function always returns true, regardless of other inner functions failing and returning false. Therefore, providing any large packet size will always pass the advance_buffer function without triggering an error message or exception. Thus, Claroty researchers were able to bypass buffer checks and reach exploitation.\u201d\nSee Also: Offensive Security Tool: Skipfish Two Exploitation Paths, Two BugsWhile researching the different firmware for the smart meters, researchers found that there are two different exploitation paths that arise from improper restriction of operations within a memory buffer, depending on the specific architecture. They reported these as two different vulnerabilities.\n\nThe bug tracked as CVE-2021-22714 rates 9.8 out of 10 on the CVSS vulnerability-severity scale.\n\n\u201cTh[...]", "creation_timestamp": "2026-09-02T01:03:26.397438Z"}, {"uuid": "2eb6ae8b-85ac-4eaa-93c0-ad523bff84f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22713", "type": "seen", "source": "https://t.me/hacking_Attack/959", "content": "is vulnerability [is a] critical integer-overflow vulnerability that could enable an attacker to send a specially crafted TCP packet to the device to either cause it to reboot the meter or remotely run code of their choice, depending on the architecture of the targeted device,\u201d according to the advisory.\n\nSchneider Electric said the affected products include:\n\n* ION7400 (prior to V3.0.0)\n* ION9000 (prior to V3.0.0)\n* PM8000 (prior to V3.0.0)\n\nThe bug tracked as CVE-2021-22713 exists in a number of versions of the PowerLogic ION line of meters, but was assessed a CVSS score of 7.5 because successful exploitation of the versions does not enable remote code execution, and enables only an attacker to force the meter to reboot. See Also: Hacking Stories: Albert Gonzalez & the \u2018Get Rich or Die Trying\u2019 Crew who stole 130 million credit-card numbersThe list of affected products includes:\n\n* ION8650 (prior to V4.40.1)\n* ION8800 (prior to V372)\n* ION7650 Hardware rev. 4 or earlier (prior to V376)\n* ION7650 Hardware rev. 5 (prior to V416)\n* ION7700/73xx (all versions)\n* ION83xx/84xx/8600 (all versions)\n\nThe vulnerability was addressed in updates released in January and March, and users are urged to move to the patched versions:\n\n* ION8650 users should update to V4.40.1, released on Jan. 4\n* ION8800 users should update to V372, released on March 3\n* ION7650 Hardware rev. 4 or earlier should update to V376, released on March 3\n* ION7650 Hardware rev. 5 should update to V416, released on March 3\nSource: https://threatpost.com (Click Link)style=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Linux-kernel-vulnerability-90x90.png Linux Systems Under Attack By New RedXOR Malware3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/security-camera-90x90.jpg Breach Exposes Verkada Security Camera Footage at Tesla, Cloudflare4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/ezgif.com-gif-maker-1-90x90.jpg Apple\u2019s Device Location-Tracking System Could Expose User Identities5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/recaptcha-90x90.jpg Fake Google reCAPTCHA Phishing Attack Swipes Office 365 Passwords6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/botnet-90x90.jpg D-Link, IoT Devices Under Attack By Tor-Based Gafgyt Variant1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Google-Chrome-Browser-90x90.jpg Google Patches Actively Exploited Flaw in Chrome Browser1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/zero_day_bugs1-90x90.jpg Microsoft Exchange Zero-Day Attackers Spy on U.S. Targets2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/ObliqueRAT--90x90.jpg Compromised Website Images Camouflage ObliqueRAT Malware2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/how-hackers-may-be-hurting-your-seo-5e45656cd8c2e-760x400-1-90x90.png Hackers exploit websites to give them excellent SEO before deploying malware2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/FireFox-Browser-Extension-90x90.jpg Malicious Mozilla Firefox Extension Allows Gmail Takeover2 weeks ago\nThe post Critical Security Hole Can Knock Smart Meters Offline first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-02T01:03:26.436820Z"}]}