Description
A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if the attacker had access to privileged user credentials. Affected Products: Easergy P5 (V01.401.102 and prior)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Easergy P5 | Firmware – < V01.401.102 | V01.401.102 |
Advisories 2
- SEVD-2022-193-04 Easergy P5 Schneider Electric CPCERT · Jul 12, 2022
- ICSA-22-055-03 Schneider Electric Easergy P5 and P3 CISA ICS & IT advisories · Feb 24, 2022