Vulnerability · Published Feb 4, 2022 · Assigned by schneider
CVE-2022-22722
High 7.5
In plain English
A high-severity hard-coded credentials in Easergy P5 from Schneider Electric. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.4% (higher than 84% of all known vulnerabilities).
Official description
A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure. If an attacker were to obtain the SSH cryptographic key for the device and take active control of the local operational network connected to the product they could potentially observe and manipulate traffic associated with product configuration. Affected Product: Easergy P5 (All firmware versions prior to V01.401.101)
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | Easergy P5 | unspecified – before 01.401.101 |
Weakness: CWE-798