Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
t300 firmware vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2020-7510
A CWE-200: Information Exposure vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow malicious user to obtain private keys.
Schneider-electric Easergy T300 Firmware
7.2
CVSSv3
CVE-2020-7505
A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to inject data with dangerous content into the firmware and execute arbitrary code on the system.
Schneider-electric Easergy T300 Firmware
7.3
CVSSv3
CVE-2021-22771
A CWE-1236: Improper Neutralization of Formula Elements in a CSV File vulnerability exists in Easergy T300 with firmware V2.7.1 and older that would allow arbitrary command execution.
Schneider-electric Easergy T300 Firmware
7.5
CVSSv3
CVE-2020-7506
A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an malicious user to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.
Schneider-electric Easergy T300 Firmware
7.5
CVSSv3
CVE-2020-28216
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an malicious user to read network traffic over HTTP protocol.
Schneider-electric Easergy T300 Firmware
7.5
CVSSv3
CVE-2020-28217
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an malicious user to read network traffic over HTTP protocol.
Schneider-electric Easergy T300 Firmware
7.2
CVSSv3
CVE-2020-7509
A CWE-269: Improper privilege management (write) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to elevate their privileges and delete files.
Schneider-electric Easergy T300 Firmware
7.5
CVSSv3
CVE-2020-7513
A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to intercept traffic and read configuration data.
Schneider-electric Easergy T300 Firmware
6.5
CVSSv3
CVE-2021-22770
A CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and older that exposes sensitive information to an actor not explicitly authorized to have access to that information.
Schneider-electric Easergy T300 Firmware
7.5
CVSSv3
CVE-2020-7507
A CWE-400: Uncontrolled Resource Consumption vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to login multiple times resulting in a denial of service.
Schneider-electric Easergy T300 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38298
CVE-2024-20356
CVE-2023-21987
CVE-2024-33217
bypass
CVE-2024-31804
CVE-2024-32660
unauthorized
SSRF
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »