Schneider Electric Easergy P5
4 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-34758 | Firmware – < V01.401.102 | A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if the attacker had ac | MEDIUM 5.1 | 0.4 % | ||
| CVE-2022-34757 | Firmware – < V01.401.102 | A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection | MEDIUM 6.7 | 0.3 % | ||
| CVE-2022-34756 | Firmware – < V01.401.102 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs | CRITICAL 9.8 | 1.6 % | ||
| CVE-2022-22722 | unspecified – < 01.401.101 | A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure. If an attacker were to obtain the | HIGH 7.5 | 2.4 % |