critical9.8
CVE-2022-22813
A CWE-798: Use of Hard-coded Credentials vulnerability exists.
Impact
A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Easergy P141 Firmware | All versions |
| Schneider-Electric | Easergy P142 Firmware | All versions |
| Schneider-Electric | Easergy P143 Firmware | All versions |
| Schneider-Electric | Easergy P145 Firmware | All versions |
| Schneider-Electric | Easergy P241 Firmware | All versions |
| Schneider-Electric | Easergy P242 Firmware | All versions |
| Schneider-Electric | Easergy P243 Firmware | All versions |
| Schneider-Electric | Easergy P342 Firmware | All versions |
| Schneider-Electric | Easergy P343 Firmware | All versions |
| Schneider-Electric | Easergy P344 Firmware | All versions |
| Schneider-Electric | Easergy P345 Firmware | All versions |
| Schneider-Electric | Easergy P441 Firmware | All versions |