https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:29:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04409 bdu:2022-04409 https://cve.radiocsirt.org/vuln/bdu:2022-04409 https://cve.radiocsirt.org/vuln/certfr-2022-avi-628 certfr-2022-avi-628 https://cve.radiocsirt.org/vuln/certfr-2022-avi-628 https://cve.radiocsirt.org/vuln/euvd-2026-178757 EUVD-2026-178757 https://cve.radiocsirt.org/vuln/euvd-2026-178757 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34758 <p>A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if the attacker had access to privileged user credentials. Affected Products: Easergy P5 (V01.401.102 and prior)</p> <p>A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if the attacker had access to privileged user credentials. Affected Products: Easergy P5 (V01.401.102 and prior)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-34758 https://cve.radiocsirt.org/vuln/ghsa-rw6g-9gmq-76ff <p>A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if the attacker had access to privileged user credentials. Affected Products: Easergy P5 (V01.401.102 and prior)</p> <p>A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if the attacker had access to privileged user credentials. Affected Products: Easergy P5 (V01.401.102 and prior)</p> https://cve.radiocsirt.org/vuln/ghsa-rw6g-9gmq-76ff https://cve.radiocsirt.org/vuln/gsd-2022-34758 gsd-2022-34758 https://cve.radiocsirt.org/vuln/gsd-2022-34758 https://cve.radiocsirt.org/vuln/icsa-22-055-03 <p>If an attacker were to obtain the SSH cryptographic key for the device and take active control of the local operational network connected to this product, they could observe and manipulate traffic associated with product configuration. This could result in information disclosure. CVE-2022-22722 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). A buffer copy without checking size of input vulnerability exists in Easergy P5 devices that could lead to a buffer overflow, causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection functions and tripping functions via GOOSE can be impacted. CVE-2022-22723 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). A buffer copy without checking size of input vulnerability exists in Easergy P3 devices that could lead to a buffer overflow, causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection functions and tripping functions via GOOSE can be impacted. CVE-2022-22725 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). An Improper Input Validation vulnerability exists in Easergy P5…</p> <p>If an attacker were to obtain the SSH cryptographic key for the device and take active control of the local operational network connected to this product, they could observe and manipulate traffic associated with product configuration. This could result in information disclosure. CVE-2022-22722 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). A buffer copy without checking size of input vulnerability exists in Easergy P5 devices that could lead to a buffer overflow, causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection functions and tripping functions via GOOSE can be impacted. CVE-2022-22723 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). A buffer copy without checking size of input vulnerability exists in Easergy P3 devices that could lead to a buffer overflow, causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection functions and tripping functions via GOOSE can be impacted. CVE-2022-22725 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). An Improper Input Validation vulnerability exists in Easergy P5…</p> https://cve.radiocsirt.org/vuln/icsa-22-055-03 https://cve.radiocsirt.org/vuln/sevd-2022-193-04 <p>Schneider Electric is aware of multiple vulnerabilities in its Easergy P5 product line. The Easergy P5 is a medium voltage protection relay. Failure to apply the mitigations or remediations provided below may risk disclosure of the device’s credentials, denial of service, device reboot, or an attacker could gain full control of the relay. This could result in loss of protection of your electrical network.</p> <p>Schneider Electric is aware of multiple vulnerabilities in its Easergy P5 product line. The Easergy P5 is a medium voltage protection relay. Failure to apply the mitigations or remediations provided below may risk disclosure of the device’s credentials, denial of service, device reboot, or an attacker could gain full control of the relay. This could result in loss of protection of your electrical network.</p> https://cve.radiocsirt.org/vuln/sevd-2022-193-04