Vulnerability · Published Jun 2, 2022 · Assigned by schneider
CVE-2022-30234
Critical 9.4
In plain English
A critical-severity hard-coded credentials in Wiser Smart from Schneider Electric. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities).
Severity (CVSS 3.1)9.4Critical
Exploit odds (30 days)1.2%top 31.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A CWE-798: Use of Hard-coded Credentials vulnerability exists that could allow arbitrary code to be executed when root level access is obtained. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | Wiser Smart | EER21000 – before 4.5EER21001 – before 4.5 |
Weakness: CWE-798 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
References
- https://www.se.com/ww/en/download/document/SEVD-2022-130-03/ x_refsource_MISC