CRITICAL🇵🇱 Wersja polska

CVE-2020-7508

CVSS 9.8v3.1pub. 2020-06-16upd. 2024-11-21

A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to gain full access by brute force.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Schneider Electric Easergy T300

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Easergy T300 Firmware

    OS
    Schneider-Electric
    ≤ 1.5.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-25176CRITICAL9.1ten sam produkt

Some commands used by the Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protoc...

CVE-2020-28215CRITICAL9.8ten sam produkt

A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cau...

CVE-2020-7561CRITICAL9.8ten sam produkt

A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2....

CVE-2020-7512CRITICAL9.8ten sam produkt

A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Ease...

CVE-2020-25178HIGH7.5ten sam produkt

ISaGRAF Workbench communicates with Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x using TCP/IP. Thi...