Schneider Electric Easergy P5 and P3

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: Schneider Electric Equipment: Easergy P5 and P3 --------- Begin Update A Part 1 of 4 --------- Vulnerabilities: Use of Hard-Coded Credentials, Classic Buffer Overflow, and Improper Input Validation --------- End Update A...

CVE-2022-22723

CVE-2022-22723 is a buffer-copy-via-input vulnerability in Schneider Electric’s Easergy P5 (all firmware versions prior to v01.401.101) that can cause crashes and arbitrary code execution when receiving specially crafted network packets. Connected docs confirm a related, separate CVE-2022-22725 a...

CVE-2022-22723

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection functions and tripping function via GOOSE can be...