Vulnerability · Published Feb 9, 2022 · Assigned by schneider
CVE-2022-22813
Critical 9.8
In plain English
A critical-severity hard-coded credentials in Easergy P40 Series model numbers with Ethernet option bit as Q, R, S (All PX4X firmware Versions). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities).
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)1.1%top 35.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Easergy P40 Series model numbers with Ethernet option bit as Q, R, S (All PX4X firmware Versions) | Easergy P40 Series model numbers with Ethernet option bit as Q, R, S (All PX4X firmware Versions) |
Weakness: CWE-798