CVE-2022-22723

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-02-04 · updated 2026-06-17
Weakness: CWE-120

Description

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection functions and tripping function via GOOSE can be impacted. Affected Product: Easergy P5 (All firmware versions prior to V01.401.101)

Affected products

Schneider Electric Easergy P5: before 01.401.101 — fixed in 01.401.101

How to fix

Upgrade to a fixed version: Schneider Electric Easergy P5 01.401.101. Check the vendor advisory for mitigations.

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-03
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-03

Get alerted when CVE-2022-22723 or the next vulnerability affects your stack