Schneider Electric Easergy T300
Successful exploitation of this vulnerability could allow an attacker to obtain unauthorized access to the internal product LAN, which could result in exposure of sensitive information, denial of service, and remote code execution when access to a resource from an attacker is not restricted or incorrectly restricted.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-28218US | medium6.5 | — | ||
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to trick a user into in… | ||||
| CVE-2020-28217US | high7.5OT elevated | — | ||
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protoc… | ||||
| CVE-2020-28216US | high7.5OT elevated | — | ||
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protoc… | ||||
| CVE-2020-28215US | critical9.8OT elevated | — | ||
A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial o… | ||||
| CVE-2020-7561US | critical9.8OT elevated | — | ||
A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of problems, including info… | ||||
references
External citations — patches, advisories, analysis.
remediations (5)
- MitigationEasergy T300 with firmware
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationEasergy T300 with firmware
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationEasergy T300 with firmware
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationEasergy T300 with firmware
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationEasergy T300 with firmware
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan