CVE-2022-22813

{"id": "CVE-2022-22813", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-02-09T23:15:19.480", "references": [{"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-03", "tags": ["Vendor Advisory"], "source": "cybersecurity@se.com"}, {"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-03", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "cybersecurity@se.com", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration."}, {"lang": "es", "value": "Una CWE-798: Se presenta una vulnerabilidad de Uso de Credenciales Embebidas. Si un atacante obtuviera la clave criptogr\u00e1fica TLS y tomara el control activo de la red de comunicaci\u00f3n de t\u00faneles de Courier, podr\u00eda potencialmente observar y manipular el tr\u00e1fico asociado a la configuraci\u00f3n del producto"}], "lastModified": "2024-11-21T06:47:29.877", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p141_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE7F2E59-3CFA-4319-ADE4-1E91F8E3C2D8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p141:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "09A782BD-7EB0-4204-A96F-AACCA3E238DA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p142_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72FF1986-01A9-4D9D-B51D-BA5C909139C8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p142:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F090CC64-5929-4D4B-8435-28852F1D879B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p143_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73333D54-11C3-4CB7-AC56-4ECE6835A933"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p143:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DE2F2968-6C62-4577-9920-470440A4C7D1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p145_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C773F18-3504-4DBF-82E0-B97AB90340F4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p145:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "21B2C060-D432-4581-AAC7-6E88A1C43975"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p241_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23FE0FAF-AE1A-41DB-8BF6-47A233B5DA7C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p241:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "027FF962-0E97-4B65-B110-C3FE671798DB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p242_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3399C63B-5A04-41DE-AC74-EDC1820317BE"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p242:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1D2DC7A6-DC92-41DA-A5F0-894FEB4DD8FF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p243_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED9A0CF9-F8C6-4E1C-B28D-98B9EF60A7F7"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p243:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0B9C31F9-7AC4-4456-9AC0-D796107713C2"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p342_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78BE0D2A-35C0-423B-99C8-AF94DDFDE833"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p342:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "52712D4B-F2CC-455E-A0D6-8F9C7F05963F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p343_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "457C5927-BE93-4D5C-8286-03D6832D60F5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p343:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2FF21C55-CA9F-483C-8D11-242093D1DE5B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p344_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA6A961E-BDC7-4725-B108-841BFAA723AB"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p344:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "35AF5D7A-7234-42C0-8142-5913E7624537"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p345_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1B524D2-7B5A-4536-9A5B-0916160493B0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p345:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F807F701-F5E2-4C3E-B729-08AF6E446C75"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p441_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FCC938A-BA3F-4F82-888A-C462E453E8F5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p441:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "664C20E7-89D1-411F-B076-FCD20A8FA297"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p442_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CBB7E681-984E-42D4-A4CC-419754E8EDC7"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p442:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "22AD5B47-F431-400B-8567-04F89F30D72C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p443_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B96FF9E-6BE3-4B7F-888D-216FCEFEFA2D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p443:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B23A16B5-B7B1-4D7D-AB0D-165EB3FF0B27"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p444_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6947A474-589F-48F8-99F2-FF259BCC05DC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p444:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CA0B415B-4DB4-4773-85AA-2786D56AF440"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p445_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF4BDAC9-BB90-477C-AC73-22E482F38BFA"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p445:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D7A7B645-4ACA-4A28-BBCD-7D92DD926E4C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p446_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54A68CCB-740E-411E-B198-FADEE8589F47"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p446:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "54DCCD5C-BD98-4712-B7D5-01F2CC80BE1B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p541_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77624954-DEB9-467D-B36C-A976C809864E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p541:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ED68119B-D08A-4D1C-917B-86F11A599762"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p542_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B23F31E-547F-4A7D-AC73-EAA5BAD856E1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p542:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B3A0A10D-FFF6-431E-A98F-115BE3DA0BD5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p543_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D44C50D-BC22-4A60-B5FC-C2C2E6198350"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p543:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "466E0679-398B-44FB-B285-67CD07DBFF6D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p544_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66ADF072-F819-4B47-AD73-903317640918"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p544:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3C7454F2-5A9D-479A-BB1A-4684348A04E5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p545_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "361C051E-CDBC-4555-959D-F42E8D33A66F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p545:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E7706CF3-FBB1-45C8-A50A-8CE6C203E075"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p546_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA4DD9C0-8CBB-4736-95D5-28388FEF3C1B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p546:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7C2F07CD-4FC0-4B54-82D8-D5D33B334AC2"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p642_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C2D64E9-E102-4B9B-A659-35660C153536"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p642:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "148A4B9A-4059-4E47-9DEB-26DD2E1F670B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p643_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4DDA982-1987-4E35-8576-B8EE26EF287F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p643:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "032D721A-6BB8-4823-8FEE-3677620A746B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p645_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4803D475-C33A-4842-B279-AA52D006C0F7"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p645:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "26DC666A-FA13-4CAA-8A0A-04C41DBE24E7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p741_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C26AB401-9C28-4A07-8253-49AF18B41318"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p741:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "98909729-9D82-4029-A14F-5FBD5BFEE6ED"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p742_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B485C72E-8296-4AC2-9C9C-C53EDF9947C0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p742:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7BDA35D3-4B6F-40E7-8FC5-316273328984"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p743_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "629841D0-09EA-4088-9BDE-16841DCD2168"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p743:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "57E9E1E5-BFFA-43BB-A3E3-F29C9DB35919"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p746_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "566E478E-4555-44F6-B07A-D7399FA8E7CC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p746:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2BCD24B9-6877-4337-A6C6-486E3AD3B575"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p341_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "358B8AE1-A0EA-4B93-88C2-1337CB9192EC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p341:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8F3AFCA0-0B1F-485D-9987-183A7DEA6C5C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p841_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2136FC17-BC4E-4AF3-B0D5-BEFA5A9EB5D0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p841:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4AC1D79D-AC01-449D-B1A8-723B175D28FF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:easergy_p849_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "95C4134A-F34F-44CA-8509-7D8E2AB53998"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:easergy_p849:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C81C0B11-6EEC-4CCD-9F27-41179EC880EF"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cybersecurity@se.com"}