Easergy P5 Firmware (Schneider-electric) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2022-07-13. Vendor: Schneider-electric.

CVEs of Easergy P5 Firmware

• CVE-2022-34757 - CVSS 6.7 (medium), 2022-07-13: A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection between Easergy…
• CVE-2022-34756 - CVSS 9.8 (critical), 2022-07-13: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs stack which is…
• CVE-2022-34758 - CVSS 5.1 (medium), 2022-07-13: A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if the attacker had access to privileged…
• CVE-2022-22723 - CVSS 8.8 (high), 2022-02-04: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and arbitrary code…
• CVE-2022-22722 - CVSS 7.5 (high), 2022-02-04: A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure. If an attacker were to obtain the SSH cryptographic…