CVEvulnerability

CVE-2022-22813

9.8 CRITICAL Published 2022-02-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-02-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-798

Description

A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration.

Affected configurations

• schneider-electric easergy p141 firmware • schneider-electric easergy p142 firmware • schneider-electric easergy p143 firmware • schneider-electric easergy p145 firmware • schneider-electric easergy p241 firmware • schneider-electric easergy p242 firmware • schneider-electric easergy p243 firmware • schneider-electric easergy p342 firmware • schneider-electric easergy p343 firmware • schneider-electric easergy p344 firmware • schneider-electric easergy p345 firmware • schneider-electric easergy p441 firmware • schneider-electric easergy p442 firmware • schneider-electric easergy p443 firmware • schneider-electric easergy p444 firmware • schneider-electric easergy p445 firmware • schneider-electric easergy p446 firmware • schneider-electric easergy p541 firmware • schneider-electric easergy p542 firmware • schneider-electric easergy p543 firmware • schneider-electric easergy p544 firmware • schneider-electric easergy p545 firmware • schneider-electric easergy p546 firmware • schneider-electric easergy p642 firmware • schneider-electric easergy p643 firmware • schneider-electric easergy p645 firmware • schneider-electric easergy p741 firmware • schneider-electric easergy p742 firmware • schneider-electric easergy p743 firmware • schneider-electric easergy p746 firmware • schneider-electric easergy p341 firmware • schneider-electric easergy p841 firmware • schneider-electric easergy p849 firmware

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References