A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection between Easergy Pro software and the device, which may allow an attacker to observe protected communication details. Affected Products: Easergy P5 (V01.401.102 and prior)

A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection between Easergy Pro software and the device, which may allow an attacker to observe protected communication details. Affected Products: Easergy P5 (V01.401.102 and prior)

Schneider Electric is aware of multiple vulnerabilities in its Easergy P5 product line. The Easergy P5 is a medium voltage protection relay. Failure to apply the mitigations or remediations provided below may risk disclosure of the device’s credentials, denial of service, device reboot, or an attacker could gain full control of the relay. This could result in loss of protection of your electrical network.