Vulnerability in Schneider-Electric Easergy P141
CVE-2022-22813
A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration.
EPSS: 0.011 (61.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Schneider-electric Easergy_p141
- Schneider-electric Easergy_p141_firmware
- Schneider-electric Easergy_p142
- Schneider-electric Easergy_p142_firmware
- Schneider-electric Easergy_p143
- Schneider-electric Easergy_p143_firmware
- Schneider-electric Easergy_p145
- Schneider-electric Easergy_p145_firmware
- Schneider-electric Easergy_p241
- Schneider-electric Easergy_p241_firmware
Weakness classification (CWE)
References
- cybersecurity@se.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-22813?
- CVE-2022-22813 is a critical-severity vulnerability in Schneider-Electric Easergy P141, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2022-02-09.
- How severe is CVE-2022-22813?
- Critical severity. CVSS v3 base score is 9.8 out of 10.