Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
schneider-electric easergy t300 firmware vulnerabilities and exploits
(subscribe to this query)
6
CVSSv2
CVE-2021-22771
A CWE-1236: Improper Neutralization of Formula Elements in a CSV File vulnerability exists in Easergy T300 with firmware V2.7.1 and older that would allow arbitrary command execution.
Schneider-electric Easergy T300 Firmware
4
CVSSv2
CVE-2021-22770
A CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and older that exposes sensitive information to an actor not explicitly authorized to have access to that information.
Schneider-electric Easergy T300 Firmware
4
CVSSv2
CVE-2021-22769
A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that could expose files or directory content when access from an attacker is not restricted or incorrectly restricted.
Schneider-electric Easergy T300 Firmware
7.5
CVSSv2
CVE-2020-28215
A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently.
Schneider-electric Easergy T300 Firmware
5
CVSSv2
CVE-2020-28216
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an malicious user to read network traffic over HTTP protocol.
Schneider-electric Easergy T300 Firmware
5
CVSSv2
CVE-2020-28217
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an malicious user to read network traffic over HTTP protocol.
Schneider-electric Easergy T300 Firmware
4.3
CVSSv2
CVE-2020-28218
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an malicious user to trick a user into initiating an unintended action.
Schneider-electric Easergy T300 Firmware
7.5
CVSSv2
CVE-2020-7561
A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of problems, including information exposure, denial of service, and command execution when access to a resource from an attacke...
Schneider-electric Easergy T300 Firmware
6.8
CVSSv2
CVE-2020-7503
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to execute malicious commands on behalf of a legitimate user when xsrf-token data is intercepted.
Schneider-electric Easergy T300 Firmware
5
CVSSv2
CVE-2020-7504
A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to disable the webserver service on the device when specially crafted network packets are sent.
Schneider-electric Easergy T300 Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32976
CVE-2024-33557
CVE-2024-36801
CVE-2024-35654
authentication bypass
CVE-2024-24919
CSRF
code execution
CVE-2024-27348
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »