CRITICAL🇬🇧 English

CVE-2020-28215

CVSS 9.8v3.1pub. 2020-12-11upd. 2024-11-21

A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Schneider Electric Easergy T300

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Easergy T300 Firmware

    OS
    Schneider-Electric
    ≤ 2.7
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEDoS
CWE
Referencje

Powiązane podatności

CVE-2020-25176CRITICAL9.1ten sam produkt

Some commands used by the Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protoc...

CVE-2020-7561CRITICAL9.8ten sam produkt

A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2....

CVE-2020-7512CRITICAL9.8ten sam produkt

A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Ease...

CVE-2020-7508CRITICAL9.8ten sam produkt

A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in Easergy T300 (Firm...

CVE-2020-25178HIGH7.5ten sam produkt

ISaGRAF Workbench communicates with Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x using TCP/IP. Thi...