CVE-2022-34756 HIGH

CVE-2022-34756

Vendor Schneider Electric
Product Easergy P5
Weakness CWE-120
Published July 13, 2022
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs stack which is used for the device Web HMI. Affected Products: Easergy P5 (V01.401.102 and prior)

Key dates

02Disclosure timeline

July 13, 2022 CVE published
September 17, 2024 Record updated