Skip to content
OpenAdvisories
High SEVD-2022-039-03 1 CVE

Easergy P40

Published Feb 8, 2022 · Updated Feb 8, 2022

Vendor: Schneider Electric Product: Easergy P40 Series model numbers with Ethernet option bit as Q, R, S P_ 4_ _ _ Q_ _ _ _ _ _ _ _, P_ 4_ _ _ R_ _ _ _ _ _ _ _ , P_ 4_ _ _ S_ _ _ _ _ _ _ _

Summary

Schneider Electric is aware of multiple vulnerabilities in its Easergy P40 product line.
The Easergy P40 is a protection relay series for MV, HV and EHV protection.
Failure to apply the mitigation provided below may risk disclosure of device credentials, loss of communications, or an attacker gaining full control of the relay. This could result in loss of protection to your electrical network.

Vulnerabilities 1

  • Unscored —
    CVE-2022-22813

    A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key …

Revision history

  1. #1

    Original release

References