PowerLogic ION Setup

An attacker could execute arbitrary code on the engineering workstation running PowerLogic ION Setup, potentially compromising the ability to manage and update metering devices across your facility.

Energy sector operators who use PowerLogic ION Setup to configure and maintain metering devices should prioritize this patch. This affects IT and engineering staff responsible for meter management and configuration on workstations in the control network.

An attacker with network access to a user running ION Setup can exploit an input validation flaw to execute code on that workstation. The CVSS vector indicates the attacker needs low-level user privileges and can trigger the vulnerability via user interaction (e.g., opening a malicious configuration file or network request).