Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
schneider-electric easergy t300 firmware vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2020-7503
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to execute malicious commands on behalf of a legitimate user when xsrf-token data is intercepted.
Schneider-electric Easergy T300 Firmware
5.3
CVSSv3
CVE-2020-7504
A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to disable the webserver service on the device when specially crafted network packets are sent.
Schneider-electric Easergy T300 Firmware
7.5
CVSSv3
CVE-2020-7506
A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an malicious user to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.
Schneider-electric Easergy T300 Firmware
7.2
CVSSv3
CVE-2020-7509
A CWE-269: Improper privilege management (write) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to elevate their privileges and delete files.
Schneider-electric Easergy T300 Firmware
9.8
CVSSv3
CVE-2020-7512
A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to exploit the component.
Schneider-electric Easergy T300 Firmware
9.8
CVSSv3
CVE-2020-7561
A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of problems, including information exposure, denial of service, and command execution when access to a resource from an attacke...
Schneider-electric Easergy T300 Firmware
6.5
CVSSv3
CVE-2021-22770
A CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and older that exposes sensitive information to an actor not explicitly authorized to have access to that information.
Schneider-electric Easergy T300 Firmware
7.2
CVSSv3
CVE-2020-7505
A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to inject data with dangerous content into the firmware and execute arbitrary code on the system.
Schneider-electric Easergy T300 Firmware
7.5
CVSSv3
CVE-2020-7510
A CWE-200: Information Exposure vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow malicious user to obtain private keys.
Schneider-electric Easergy T300 Firmware
9.8
CVSSv3
CVE-2020-28215
A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently.
Schneider-electric Easergy T300 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »