CVE-2022-22813
CRITICALSchneider Electric Easergy P141-P443 Firmware - Use of Hard-coded Credentials
Title source: llmDescription
A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-03
Scores
CVSS v3
9.8
EPSS
0.0041
EPSS Percentile
61.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-798
Status
published
Products (33)
schneider-electric/easergy_p141_firmware
schneider-electric/easergy_p142_firmware
schneider-electric/easergy_p143_firmware
schneider-electric/easergy_p145_firmware
schneider-electric/easergy_p241_firmware
schneider-electric/easergy_p242_firmware
schneider-electric/easergy_p243_firmware
schneider-electric/easergy_p341_firmware
schneider-electric/easergy_p342_firmware
schneider-electric/easergy_p343_firmware
... and 23 more
Published
Feb 09, 2022
Tracked Since
Feb 18, 2026