CVE-2022-22722

HIGH

Easergy P5 Firmware < 01.401.101 - Use of Hard-coded Credentials

Title source: llm
STIX 2.1

Description

A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure. If an attacker were to obtain the SSH cryptographic key for the device and take active control of the local operational network connected to the product they could potentially observe and manipulate traffic associated with product configuration. Affected Product: Easergy P5 (All firmware versions prior to V01.401.101)

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0016
EPSS Percentile 36.2%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-798
Status published
Products (1)
schneider-electric/easergy_p5_firmware < 01.401.101
Published Feb 04, 2022
Tracked Since Feb 18, 2026