CVE-2022-30237: Schneider Electric Wiser Smart EER21000 Firmware

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A CWE-311: Missing Encryption of Sensitive Data vulnerability exists that could allow authentication credentials to be recovered when an attacker breaks the encoding. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)

Affected products

• Schneider Electric Wiser Smart EER21000 Firmware: up to and including 4.5
• Schneider Electric Wiser Smart EER21001 Firmware: up to and including 4.5

Published 2022-06-02. Last modified 2026-06-17.