Skip to content
OpenAdvisories
High ICSA-22-055-03 4 CVEs

Schneider Electric Easergy P5 and P3

Published Feb 24, 2022 · Updated Feb 24, 2022

Vendor: Schneider Electric Product: Easergy P3 Product: Easergy P5 All firmware

Summary

Successful exploitation of these vulnerabilities may disclose device credentials, cause a denial-of-service condition, device reboot, or allow an attacker to gain full control of the relay. This could result in loss of protection to your electrical network.

Vulnerabilities 4

  • Medium 5.1
    CVE-2022-34758

    A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled i…

    Schneider Electric Easergy P5 ICS / OT
  • Unscored —
    CVE-2022-22722

    A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure. If an attack…

    Schneider Electric Easergy P5 ICS / OT
  • Unscored —
    CVE-2022-22723

    A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing…

  • Unscored —
    CVE-2022-22725

    A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing…

Revision history

  1. #1

    ICSA-22-055-03 Schneider Electric Easergy P5 and P3

References