Summary
Schneider Electric is aware of multiple vulnerabilities in its Easergy P5 product line.
The Easergy P5 is a medium voltage protection relay.
Failure to apply the mitigations or remediations provided below may risk disclosure of the device’s credentials, denial of service, device reboot, or an attacker could gain full control of the relay. This could result in loss of protection of your electrical network.
Vulnerabilities 3
-
High 8.8
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution o…
-
Medium 6.7
A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used f…
-
Medium 5.1
A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled i…
Revision history
-
#1
Original Release
References
-
Easergy P5 - SEVD-2022-193-04 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-193-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-193-04_Easergy_P5_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/