CVE-2022-22813
Quick assessment
Affected
n/a Easergy P40 Series model numbers with Ethernet option bit as Q, R, S (All PX4X firmware Versions)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Schneider Electric Easergy P40是法国施耐德电气（Schneider Electric）公司的一系列用于 Mv、Hv 和 Ehv 保护的保护继电器。 Schneider Electric Easergy P40 存在信任管理问题漏洞，该漏洞源于如果攻击者可利用该漏洞获得TLS加密密钥并主动控制Courier隧道通信网络，他们可能会观察和操纵与产品配置相关的流量。
Possible ATT&CK Techniques 1 AI
T1557 · Adversary-in-the-Middle
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-22813
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
使用硬编码的凭证
Source: CVE Program / CVE List V5
Vulnerability Title
Schneider Electric Easergy P40 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Schneider Electric Easergy P40是法国施耐德电气（Schneider Electric）公司的一系列用于 Mv、Hv 和 Ehv 保护的保护继电器。 Schneider Electric Easergy P40 存在信任管理问题漏洞，该漏洞源于如果攻击者可利用该漏洞获得TLS加密密钥并主动控制Courier隧道通信网络，他们可能会观察和操纵与产品配置相关的流量。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Easergy P40 Series model numbers with Ethernet option bit as Q, R, S (All PX4X firmware Versions) | Easergy P40 Series model numbers with Ethernet option bit as Q, R, S (All PX4X firmware Versions) | - |
|
II. Public POCs for CVE-2022-22813
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-22813
请登录查看更多情报信息。
Other References for CVE-2022-22813 (1)
Same Patch Batch · n/a · 2022-02-09 · 115 CVEs total
| CVE-2021-33110 | Intel Wireless Bluetooth 和 Killer Bluetooth 输入验证错误漏洞 | |
| CVE-2022-21156 | Intel Trace Analyzer And Collector 缓冲区错误漏洞 | |
| CVE-2021-44454 | Intel Quartus Prime Pro 输入验证错误漏洞 | |
| CVE-2022-21174 | Intel Quartus Prime Pro 安全漏洞 | |
| CVE-2022-21153 | Intel Capital Global Summit Android App 安全漏洞 | |
| CVE-2022-21133 | Intel Trace Analyzer And Collector 缓冲区错误漏洞 | |
| CVE-2021-33155 | Intel Wireless Bluetooth 和 Killer Bluetooth 输入验证错误漏洞 | |
| CVE-2021-33166 | Intel RXT for Chromebook 安全漏洞 | |
| CVE-2021-33129 | Intel Advisor 安全漏洞 | |
| CVE-2021-33139 | Intel Wireless Bluetooth 和 Killer Bluetooth 代码问题漏洞 | |
| CVE-2021-33137 | Intel Kernelflinger 缓冲区错误漏洞 | |
| CVE-2021-33147 | Intel Integrated Performance Primitives 代码问题漏洞 | |
| CVE-2021-33120 | Intel Processors BIOS firmware 缓冲区错误漏洞 | |
| CVE-2021-33119 | Intel RealSense Depth Camera Manager 安全漏洞 | |
| CVE-2021-33114 | Intel PROSet/Wireless WiFi Software 输入验证错误漏洞 | |
| CVE-2021-33068 | Intel 多款产品代码问题漏洞 | |
| CVE-2021-23152 | Intel Advisor 安全漏洞 | |
| CVE-2021-0178 | Intel 多款产品输入验证错误漏洞 | |
| CVE-2021-0183 | Intel 多款产品输入验证错误漏洞 | |
| CVE-2021-33061 | Intel 82599 Ethernet Series 安全漏洞 |
Showing top 20 of 115 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-93962
Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-ba -
CVE-2026-93960
Pixelfed OAuth Scope ApiV1Controller.php instancePeers missi -
CVE-2026-93650
Saleor throttling.py get_client_ip excessive authentication -
CVE-2026-93506
SveltyCMS File Upload Endpoint upload-media server-side requ -
CVE-2026-93505
SveltyCMS SVG Media Upload media-service.server.ts cross sit
Same weakness: CWE-798
-
CVE-2026-86555
Hardcoded Key Vulnerability in ZTE SmartLife APP -
CVE-2026-93970
aiyiyi121 SxDevOps Settings settings.py hard-coded credentia -
CVE-2026-93969
aiyiyi121 SxDevOps services.py ensure_default_superuser hard -
CVE-2026-84034
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-77960
Use of Hard-coded Credentials in Bransys ELD
V. Comments for CVE-2022-22813
No comments yet