CVE-2022-22723
High
Description
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection functions and tripping function via GOOSE can be impacted. Affected Product: Easergy P5 (All firmware versions prior to V01.401.101)
SeverityHigh
CVSS8.8
Exploit probability—
ProductSchneider-electric Easergy P5 Firmware
PublishedFeb 4, 2022
First seenFeb 4, 2022
Weakness typeCWE-120CWE-120
How to fix
Update
- schneider-electric easergy_p5_firmware01.401.101 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric easergy_p5_firmware | v < 01.401.101 | 01.401.101 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.