CVE-2022-22813

Published: Feb 9, 2022Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration.

Affected (33)

Schneider Electric

33 products

Easergy P141 Firmware

Easergy P142 Firmware

Easergy P143 Firmware

Easergy P145 Firmware

Easergy P241 Firmware

Easergy P242 Firmware

Easergy P243 Firmware

Easergy P342 Firmware

Easergy P343 Firmware

Easergy P344 Firmware

Easergy P345 Firmware

Easergy P441 Firmware

Easergy P442 Firmware

Easergy P443 Firmware

Easergy P444 Firmware

Easergy P445 Firmware

Easergy P446 Firmware

Easergy P541 Firmware

Easergy P542 Firmware

Easergy P543 Firmware

Easergy P544 Firmware

Easergy P545 Firmware

Easergy P546 Firmware

Easergy P642 Firmware

Easergy P643 Firmware

Easergy P645 Firmware

Easergy P741 Firmware

Easergy P742 Firmware

Easergy P743 Firmware

Easergy P746 Firmware

Easergy P341 Firmware

Easergy P841 Firmware

Easergy P849 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P141 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P141	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P142 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P142	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P143 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P143	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P145 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P145	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P241 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P241	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P242 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P242	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P243 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P243	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P342 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P342	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P343 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P343	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P344 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P344	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P345 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P345	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P441 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P441	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P442 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P442	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P443 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P443	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P444 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P444	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P445 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P445	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P446 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P446	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P541 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P541	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P542 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P542	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P543 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P543	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P544 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P544	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P545 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P545	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P546 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P546	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P642 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P642	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P643 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P643	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P645 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P645	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P741 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P741	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P742 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P742	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P743 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P743	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P746 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P746	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P341 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P341	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P841 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P841	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Easergy P849 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Easergy P849	All versions

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-03

Source: cybersecurity@se.com

Vendor Advisory

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-03

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.