Lucene search

[email protected]NVD:CVE-2022-22813

HistoryFeb 09, 2022 - 11:15 p.m.

CVE-2022-22813

2022-02-0923:15:19

CWE-798

[email protected]

web.nvd.nist.gov

cve-2022-22813

cwe-798

tls cryptographic key

courier tunneling communication

product configuration

traffic observation

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

58.3%

JSON

A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration.

Affected configurations

Nvd

Node

schneider-electriceasergy_p141_firmwareMatch-

AND

schneider-electriceasergy_p141Match-

Node

schneider-electriceasergy_p142_firmwareMatch-

AND

schneider-electriceasergy_p142Match-

Node

schneider-electriceasergy_p143_firmwareMatch-

AND

schneider-electriceasergy_p143Match-

Node

schneider-electriceasergy_p145_firmwareMatch-

AND

schneider-electriceasergy_p145Match-

Node

schneider-electriceasergy_p241_firmwareMatch-

AND

schneider-electriceasergy_p241Match-

Node

schneider-electriceasergy_p242_firmwareMatch-

AND

schneider-electriceasergy_p242Match-

Node

schneider-electriceasergy_p243_firmwareMatch-

AND

schneider-electriceasergy_p243Match-

Node

schneider-electriceasergy_p342_firmwareMatch-

AND

schneider-electriceasergy_p342Match-

Node

schneider-electriceasergy_p343_firmwareMatch-

AND

schneider-electriceasergy_p343Match-

Node

schneider-electriceasergy_p344_firmwareMatch-

AND

schneider-electriceasergy_p344Match-

Node

schneider-electriceasergy_p345_firmwareMatch-

AND

schneider-electriceasergy_p345Match-

Node

schneider-electriceasergy_p441_firmwareMatch-

AND

schneider-electriceasergy_p441Match-

Node

schneider-electriceasergy_p442_firmwareMatch-

AND

schneider-electriceasergy_p442Match-

Node

schneider-electriceasergy_p443_firmwareMatch-

AND

schneider-electriceasergy_p443Match-

Node

schneider-electriceasergy_p444_firmwareMatch-

AND

schneider-electriceasergy_p444Match-

Node

schneider-electriceasergy_p445_firmwareMatch-

AND

schneider-electriceasergy_p445Match-

Node

schneider-electriceasergy_p446_firmwareMatch-

AND

schneider-electriceasergy_p446Match-

Node

schneider-electriceasergy_p541_firmwareMatch-

AND

schneider-electriceasergy_p541Match-

Node

schneider-electriceasergy_p542_firmwareMatch-

AND

schneider-electriceasergy_p542Match-

Node

schneider-electriceasergy_p543_firmwareMatch-

AND

schneider-electriceasergy_p543Match-

Node

schneider-electriceasergy_p544_firmwareMatch-

AND

schneider-electriceasergy_p544Match-

Node

schneider-electriceasergy_p545_firmwareMatch-

AND

schneider-electriceasergy_p545Match-

Node

schneider-electriceasergy_p546_firmwareMatch-

AND

schneider-electriceasergy_p546Match-

Node

schneider-electriceasergy_p642_firmwareMatch-

AND

schneider-electriceasergy_p642Match-

Node

schneider-electriceasergy_p643_firmwareMatch-

AND

schneider-electriceasergy_p643Match-

Node

schneider-electriceasergy_p645_firmwareMatch-

AND

schneider-electriceasergy_p645Match-

Node

schneider-electriceasergy_p741_firmwareMatch-

AND

schneider-electriceasergy_p741Match-

Node

schneider-electriceasergy_p742_firmwareMatch-

AND

schneider-electriceasergy_p742Match-

Node

schneider-electriceasergy_p743_firmwareMatch-

AND

schneider-electriceasergy_p743Match-

Node

schneider-electriceasergy_p746_firmwareMatch-

AND

schneider-electriceasergy_p746Match-

Node

schneider-electriceasergy_p341_firmwareMatch-

AND

schneider-electriceasergy_p341Match-

Node

schneider-electriceasergy_p841_firmwareMatch-

AND

schneider-electriceasergy_p841Match-

Node

schneider-electriceasergy_p849_firmwareMatch-

AND

schneider-electriceasergy_p849Match-

VendorProductVersionCPE
schneider-electriceasergy_p141_firmware-cpe:2.3:o:schneider-electric:easergy_p141_firmware:-:*:*:*:*:*:*:*
schneider-electriceasergy_p141-cpe:2.3:h:schneider-electric:easergy_p141:-:*:*:*:*:*:*:*
schneider-electriceasergy_p142_firmware-cpe:2.3:o:schneider-electric:easergy_p142_firmware:-:*:*:*:*:*:*:*
schneider-electriceasergy_p142-cpe:2.3:h:schneider-electric:easergy_p142:-:*:*:*:*:*:*:*
schneider-electriceasergy_p143_firmware-cpe:2.3:o:schneider-electric:easergy_p143_firmware:-:*:*:*:*:*:*:*
schneider-electriceasergy_p143-cpe:2.3:h:schneider-electric:easergy_p143:-:*:*:*:*:*:*:*
schneider-electriceasergy_p145_firmware-cpe:2.3:o:schneider-electric:easergy_p145_firmware:-:*:*:*:*:*:*:*
schneider-electriceasergy_p145-cpe:2.3:h:schneider-electric:easergy_p145:-:*:*:*:*:*:*:*
schneider-electriceasergy_p241_firmware-cpe:2.3:o:schneider-electric:easergy_p241_firmware:-:*:*:*:*:*:*:*
schneider-electriceasergy_p241-cpe:2.3:h:schneider-electric:easergy_p241:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
schneider-electric	easergy_p141_firmware	-	cpe:2.3:o:schneider-electric:easergy_p141_firmware:-:::::::*
schneider-electric	easergy_p141	-	cpe:2.3:h:schneider-electric:easergy_p141:-:::::::*
schneider-electric	easergy_p142_firmware	-	cpe:2.3:o:schneider-electric:easergy_p142_firmware:-:::::::*
schneider-electric	easergy_p142	-	cpe:2.3:h:schneider-electric:easergy_p142:-:::::::*
schneider-electric	easergy_p143_firmware	-	cpe:2.3:o:schneider-electric:easergy_p143_firmware:-:::::::*
schneider-electric	easergy_p143	-	cpe:2.3:h:schneider-electric:easergy_p143:-:::::::*
schneider-electric	easergy_p145_firmware	-	cpe:2.3:o:schneider-electric:easergy_p145_firmware:-:::::::*
schneider-electric	easergy_p145	-	cpe:2.3:h:schneider-electric:easergy_p145:-:::::::*
schneider-electric	easergy_p241_firmware	-	cpe:2.3:o:schneider-electric:easergy_p241_firmware:-:::::::*
schneider-electric	easergy_p241	-	cpe:2.3:h:schneider-electric:easergy_p241:-:::::::*

Rows per page:

1-10 of 661

References

download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-03

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

58.3%

JSON

Related for NVD:CVE-2022-22813

cvelist1 cve1 prion1