Skip to content
OpenAdvisories
High · 8.8 CVE-2022-34756 EUVD-2022-37704GHSA-8995-37xw-9hjj

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs…

Published Jul 13, 2022 · Updated Sep 17, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: Easergy P5 Category: ICS / OT

Description

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs stack which is used for the device Web HMI. Affected Products: Easergy P5 (V01.401.102 and prior)

Affected products

VendorProductAffectedFixed
Schneider Electric Easergy P5 Firmware – < V01.401.102 V01.401.102

Advisories 1

References