CVE-2016-5815
CriticalSummary
An issue was discovered on Schneider Electric IONXXXX series power meters, including ION73XX, ION75XX, ION76XX, ION8650, ION8800, and PM5XXX. No authentication is configured by default, allowing unauthorized users to access the device management portal and make configuration changes.
Risk Assessment
The lack of authentication poses a serious security risk, enabling unauthorized users to modify device settings, which could lead to improper functioning of energy systems.
Recommendation
It is recommended to configure authentication on the devices and regularly monitor access to the management portal to minimize the risk of unauthorized changes.
Original NVD description (English source)
An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 series, and PM5XXX series. No authentication is configured by default. An unauthorized user can access the device management portal and make configuration changes.