CVE-2022-22813
A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cybersecurity@se.com
- Published
- 2022-02-09
- Last modified
- 2024-08-03
- Weaknesses
- CWE-798
Affected products
- Easergy P141 Firmware (Schneider-electric)
- Easergy P142 Firmware (Schneider-electric)
- Easergy P143 Firmware (Schneider-electric)
- Easergy P145 Firmware (Schneider-electric)
- Easergy P241 Firmware (Schneider-electric)
- Easergy P242 Firmware (Schneider-electric)
- Easergy P243 Firmware (Schneider-electric)
- Easergy P341 Firmware (Schneider-electric)
- Easergy P342 Firmware (Schneider-electric)
- Easergy P343 Firmware (Schneider-electric)
- Easergy P344 Firmware (Schneider-electric)
- Easergy P345 Firmware (Schneider-electric)
- Easergy P441 Firmware (Schneider-electric)
- Easergy P442 Firmware (Schneider-electric)
- Easergy P443 Firmware (Schneider-electric)
- Easergy P444 Firmware (Schneider-electric)
- Easergy P445 Firmware (Schneider-electric)
- Easergy P446 Firmware (Schneider-electric)
- Easergy P541 Firmware (Schneider-electric)
- Easergy P542 Firmware (Schneider-electric)
- Easergy P543 Firmware (Schneider-electric)
- Easergy P544 Firmware (Schneider-electric)
- Easergy P545 Firmware (Schneider-electric)
- Easergy P546 Firmware (Schneider-electric)
- Easergy P642 Firmware (Schneider-electric)
- Easergy P643 Firmware (Schneider-electric)
- Easergy P645 Firmware (Schneider-electric)
- Easergy P741 Firmware (Schneider-electric)
- Easergy P742 Firmware (Schneider-electric)
- Easergy P743 Firmware (Schneider-electric)
- Easergy P746 Firmware (Schneider-electric)
- Easergy P841 Firmware (Schneider-electric)
- Easergy P849 Firmware (Schneider-electric)
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-03
