CVE-2022-34754: Schneider Electric ACTI9 Powertag Link C (a9xelc10-A) Firmware

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing credentials. Affected Products: Acti9 PowerTag Link C (A9XELC10-A) (V1.7.5 and prior), Acti9 PowerTag Link C (A9XELC10-B) (V2.12.0 and prior)

Affected products

• Schneider Electric ACTI9 Powertag Link C (a9xelc10-A) Firmware: up to and including 1.7.5
• Schneider Electric ACTI9 Powertag Link C (a9xelc10-B) Firmware: up to and including 2.12.0

Published 2022-07-13. Last modified 2026-06-17.