CVE-2022-22722
HIGHEasergy P5 Firmware < 01.401.101 - Use of Hard-coded Credentials
Title source: llmDescription
A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure. If an attacker were to obtain the SSH cryptographic key for the device and take active control of the local operational network connected to the product they could potentially observe and manipulate traffic associated with product configuration. Affected Product: Easergy P5 (All firmware versions prior to V01.401.101)
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-03
Scores
CVSS v3
7.5
EPSS
0.0016
EPSS Percentile
36.2%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-798
Status
published
Products (1)
schneider-electric/easergy_p5_firmware
< 01.401.101
Published
Feb 04, 2022
Tracked Since
Feb 18, 2026