Easergy P5 Firmware vulnerabilities
3 known vulnerabilities in Easergy P5 Firmware from Schneider Electric. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Easergy P5: Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs stack which is used for the device Web HMI. Affected Products: Easergy P5 (V01.401.102 and prior)
- 8.8 High severity
Easergy P5 (All firmware versions prior to…: Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection functions an
- 7.5 High severity
Easergy P5: Use of Hard-coded Credentials
A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure. If an attacker were to obtain the SSH cryptographic key for the device and take active control of the local operational network connected to the product