Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
schneider-electric easergy t300 firmware vulnerabilities and exploits
(subscribe to this query)
605
VMScore
CVE-2020-7503
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to execute malicious commands on behalf of a legitimate user when xsrf-token data is intercepted.
Schneider-electric Easergy T300 Firmware
445
VMScore
CVE-2020-7504
A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to disable the webserver service on the device when specially crafted network packets are sent.
Schneider-electric Easergy T300 Firmware
445
VMScore
CVE-2020-7506
A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an malicious user to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.
Schneider-electric Easergy T300 Firmware
578
VMScore
CVE-2020-7509
A CWE-269: Improper privilege management (write) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to elevate their privileges and delete files.
Schneider-electric Easergy T300 Firmware
668
VMScore
CVE-2020-7512
A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to exploit the component.
Schneider-electric Easergy T300 Firmware
668
VMScore
CVE-2020-7561
A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of problems, including information exposure, denial of service, and command execution when access to a resource from an attacke...
Schneider-electric Easergy T300 Firmware
356
VMScore
CVE-2021-22770
A CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and older that exposes sensitive information to an actor not explicitly authorized to have access to that information.
Schneider-electric Easergy T300 Firmware
801
VMScore
CVE-2020-7505
A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an malicious user to inject data with dangerous content into the firmware and execute arbitrary code on the system.
Schneider-electric Easergy T300 Firmware
445
VMScore
CVE-2020-7510
A CWE-200: Information Exposure vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow malicious user to obtain private keys.
Schneider-electric Easergy T300 Firmware
668
VMScore
CVE-2020-28215
A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently.
Schneider-electric Easergy T300 Firmware
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »