CVE-2022-34756

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs stack which is used for the device Web HMI. Affected Products: Easergy P5 V01.401.102 and prior...

CVE-2022-34758

A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if the attacker had access to privileged user credentials. Affected Products: Easergy P5 V01.401.102 and prior...

CVE-2022-34757

A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection between Easergy Pro software and the device, which may allow an attacker to observe protected communication details. Affected Products: Easergy P5 V01.401.1...

Input validation

A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if the attacker had access to privileged user credentials. Affected Products: Easergy P5 V01.401.102 and prior...

Design/Logic Flaw

A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection between Easergy Pro software and the device, which may allow an attacker to observe protected communication details. Affected Products: Easergy P5 V01.401.1...

Design/Logic Flaw

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs stack which is used for the device Web HMI. Affected Products: Easergy P5 V01.401.102 and prior...

CVE-2022-34758

A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if the attacker had access to privileged user credentials. Affected Products: Easergy P5 V01.401.102 and prior...

CVE-2022-34758

CVE-2022-34758 affects Schneider Electric Easergy P5 (firmware prior to v01.401.102). It is an Improper Input Validation vulnerability (CWE-20) that could disable the device watchdog if an attacker has privileged credentials. The published advisories confirm vulnerable P5 firmware and provide a p...

CVE-2022-34756

The CVE-2022-34756 affects Schneider Electric Easergy P5 (v01.401.102 and prior) and is caused by a CWE-120 buffer copy without checking input size. This vulnerability can lead to remote code execution or a crash of the device’s HTTPs Web HMI stack. Documented impact is high with a CVSS base scor...

CVE-2022-34756

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs stack which is used for the device Web HMI. Affected Products: Easergy P5 V01.401.102 and prior...

Schneider Electric Easergy P5 加密问题漏洞

The Schneider Electric Easergy P5 is a protective relay for demanding medium voltage applications from Schneider Electric, France. A vulnerability in encryption issues exists in Schneider Electric Easergy P5 V01.401.102 and prior versions, which stems from the use of a corrupted or risky encrypti...

CVE-2022-34758: Improper Input Validation

A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if the attacker had access to privileged user credentials. Affected Products: Easergy P5 V01.401.102 and prior...

CVE-2022-34757: Use of a Broken or Risky Cryptographic Algorithm

A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection between Easergy Pro software and the device, which may allow an attacker to observe protected communication details. Affected Products: Easergy P5 V01.401.1...

CVE-2022-34756: Buffer Copy without Checking Size of Input

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs stack which is used for the device Web HMI. Affected Products: Easergy P5 V01.401.102 and prior...

CVE-2022-34756

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs stack which is used for the device Web HMI. Affected Products: Easergy P5 V01.401.102 and prior...

CVE-2022-34757

A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection between Easergy Pro software and the device, which may allow an attacker to observe protected communication details. Affected Products: Easergy P5 V01.401.1...

CVE-2022-34758

A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if the attacker had access to privileged user credentials. Affected Products: Easergy P5 V01.401.102 and prior...

PT-2022-3623

Name of the Vulnerable Software and Affected Versions Easergy P5 versions V01.401.102 and prior Description A buffer copy without checking the size of input vulnerability exists, which could result in remote code execution or the crash of the HTTPS stack used for the device Web HMI. This issue ma...

PT-2022-3624

Name of the Vulnerable Software and Affected Versions Easergy P5 versions V01.401.102 and prior Description A vulnerability exists due to improper input validation, which could cause the device watchdog function to be disabled if an attacker has access to privileged user credentials. This issue c...

PT-2022-3622

Name of the Vulnerable Software and Affected Versions Easergy P5 versions V01.401.102 and prior Description The issue is related to the use of defective cryptographic algorithms, which may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information...