CVE-2022-22813
Critical
Description
A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSchneider-electric Easergy P141 Firmware
PublishedFeb 9, 2022
First seenFeb 9, 2022
Weakness typeCWE-798Hard-coded credentials
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric easergy_p141_firmware | No range specified | — |
| schneider-electric easergy_p142_firmware | No range specified | — |
| schneider-electric easergy_p143_firmware | No range specified | — |
| schneider-electric easergy_p145_firmware | No range specified | — |
| schneider-electric easergy_p241_firmware | No range specified | — |
| schneider-electric easergy_p242_firmware | No range specified | — |
| schneider-electric easergy_p243_firmware | No range specified | — |
| schneider-electric easergy_p342_firmware | No range specified | — |
| schneider-electric easergy_p343_firmware | No range specified | — |
| schneider-electric easergy_p344_firmware | No range specified | — |
| schneider-electric easergy_p345_firmware | No range specified | — |
| schneider-electric easergy_p441_firmware | No range specified | — |
| schneider-electric easergy_p442_firmware | No range specified | — |
| schneider-electric easergy_p443_firmware | No range specified | — |
| schneider-electric easergy_p444_firmware | No range specified | — |
| schneider-electric easergy_p445_firmware | No range specified | — |
| schneider-electric easergy_p446_firmware | No range specified | — |
| schneider-electric easergy_p541_firmware | No range specified | — |
| schneider-electric easergy_p542_firmware | No range specified | — |
| schneider-electric easergy_p543_firmware | No range specified | — |
| schneider-electric easergy_p544_firmware | No range specified | — |
| schneider-electric easergy_p545_firmware | No range specified | — |
| schneider-electric easergy_p546_firmware | No range specified | — |
| schneider-electric easergy_p642_firmware | No range specified | — |
| schneider-electric easergy_p643_firmware | No range specified | — |
| schneider-electric easergy_p645_firmware | No range specified | — |
| schneider-electric easergy_p741_firmware | No range specified | — |
| schneider-electric easergy_p742_firmware | No range specified | — |
| schneider-electric easergy_p743_firmware | No range specified | — |
| schneider-electric easergy_p746_firmware | No range specified | — |
| schneider-electric easergy_p341_firmware | No range specified | — |
| schneider-electric easergy_p841_firmware | No range specified | — |
| schneider-electric easergy_p849_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.