A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration.

A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration.

Schneider Electric is aware of multiple vulnerabilities in its Easergy P40 product line. The Easergy P40 is a protection relay series for MV, HV and EHV protection. Failure to apply the mitigation provided below may risk disclosure of device credentials, loss of communications, or an attacker gaining full control of the relay. This could result in loss of protection to your electrical network.