Easergy P5 vulnerabilities

2 known vulnerabilities in Easergy P5 from Schneider Electric. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Easergy P5: Buffer Copy without Checking Size of Input

  CVE-2022-34756Jul 13, 2022Schneider ElectricEPSS 1.65%

  A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs stack which is used for the device Web HMI. Affected Products: Easergy P5 (V01.401.102 and prior)

• 7.5 High severity

  Easergy P5: Use of Hard-coded Credentials

  CVE-2022-22722Feb 4, 2022Schneider ElectricEPSS 2.37%

  A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure. If an attacker were to obtain the SSH cryptographic key for the device and take active control of the local operational network connected to the product