Product by Schneider Electric

    Easergy T300

    17 known vulnerabilities in Easergy T300 (Schneider Electric), 0 of them actively exploited (CISA KEV).

    Key figures

    17

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Easergy T300 (Schneider Electric)
    SeverityCVETitleCVSSPublished
    CriticalCVE-2020-8597

    Point-to-point Protocol: Buffer Overflow

    		9.8
    CriticalCVE-2020-7561

    Easergy T300 with firmware 2.7 and older: Improper Access Control

    		9.8
    CriticalCVE-2020-28215

    Easergy T300 (firmware 2.7 and older): Missing Authorization

    		9.8
    CriticalCVE-2020-7508

    Easergy T300 (Firmware version 1.5.2 and older): Improper Restriction of Excessive Authentication Attempts

    		9.8
    CriticalCVE-2020-7512

    Easergy T300 (Firmware version 1.5.2 and older): Use of Platform-Dependent Third Party Components

    		9.8
    HighCVE-2020-7510

    Easergy T300 (Firmware version 1.5.2 and older): Exposure of Sensitive Information to an Unauthorized Actor

    		7.5
    HighCVE-2020-7506

    Schneider Electric Easergy T300 Firmware: Exposure of Sensitive Information to an Unauthorized Actor

    		7.5
    HighCVE-2020-7507

    Easergy T300 (Firmware version 1.5.2 and older): Uncontrolled Resource Consumption

    		7.5
    HighCVE-2020-7509

    Easergy T300 (Firmware version 1.5.2 and older): Improper Privilege Management

    		7.2
    MediumCVE-2020-28218

    Easergy T300 (firmware 2.7 and older): Improper Restriction of Rendered UI Layers or Frames

    		6.5
    MediumCVE-2020-7504

    Easergy T300 (Firmware version 1.5.2 and older): Improper Input Validation

    		5.3
    HighCVE-2020-7505

    Easergy T300 (Firmware version 1.5.2 and older): Download of Code Without Integrity Check

    		7.2
    HighCVE-2020-7511

    Easergy T300 (Firmware version 1.5.2 and older): Use of a Broken or Risky Cryptographic Algorithm

    		7.5
    HighCVE-2020-7513

    Easergy T300 (Firmware version 1.5.2 and older): Cleartext Storage of Sensitive Information

    		7.5
    HighCVE-2020-7503

    Easergy T300 (Firmware version 1.5.2 and older): Cross-Site Request Forgery (CSRF)

    		8.8
    HighCVE-2020-28217

    Easergy T300 (firmware 2.7 and older): Missing Encryption of Sensitive Data

    		7.5
    HighCVE-2020-28216

    Easergy T300 (firmware 2.7 and older): Missing Encryption of Sensitive Data

    		7.5

    All products by Schneider Electric