CRITICALπŸ‡΅πŸ‡± Wersja polska

CVE-2020-7561

CVSS 9.8v3.1pub. 2020-11-19upd. 2024-11-21

A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of problems, including information exposure, denial of service, and command execution when access to a resource from an attacker is not restricted or incorrectly restricted.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Schneider Electric Easergy T300

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Easergy T300 Firmware

    OS
    Schneider-Electric
    ≀ 2.7
πŸ”΅
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2020-25176CRITICAL9.1ten sam produkt

Some commands used by the Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protoc...

CVE-2020-28215CRITICAL9.8ten sam produkt

A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cau...

CVE-2020-7512CRITICAL9.8ten sam produkt

A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Ease...

CVE-2020-7508CRITICAL9.8ten sam produkt

A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in Easergy T300 (Firm...

CVE-2020-25178HIGH7.5ten sam produkt

ISaGRAF Workbench communicates with Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x using TCP/IP. Thi...

CVE-2020-7561 β€” Schneider-Electric β€” Easergy T300 β€” CRITICAL β€” CVSS 9.8 | CVEbaza.pl