Product by Schneider Electric

    Easergy T300 Firmware

    24 known vulnerabilities in Easergy T300 Firmware (Schneider Electric), 0 of them actively exploited (CISA KEV).

    Key figures

    24

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Easergy T300 Firmware (Schneider Electric)
    SeverityCVETitleCVSSPublished
    CriticalCVE-2020-25176

    Rockwell Automation ISaGRAF5 Runtime Relative Path Traversal

    		9.1
    CriticalCVE-2020-7561

    Easergy T300 with firmware 2.7 and older: Improper Access Control

    		9.8
    CriticalCVE-2020-28215

    Easergy T300 (firmware 2.7 and older): Missing Authorization

    		9.8
    CriticalCVE-2020-7508

    Easergy T300 (Firmware version 1.5.2 and older): Improper Restriction of Excessive Authentication Attempts

    		9.8
    CriticalCVE-2020-7512

    Easergy T300 (Firmware version 1.5.2 and older): Use of Platform-Dependent Third Party Components

    		9.8
    HighCVE-2020-25178

    Rockwell Automation ISaGRAF5 Runtime Cleartext Transmission of Sensitive Information

    		7.5
    HighCVE-2020-7510

    Easergy T300 (Firmware version 1.5.2 and older): Exposure of Sensitive Information to an Unauthorized Actor

    		7.5
    HighCVE-2020-7506

    Schneider Electric Easergy T300 Firmware: Exposure of Sensitive Information to an Unauthorized Actor

    		7.5
    HighCVE-2020-7507

    Easergy T300 (Firmware version 1.5.2 and older): Uncontrolled Resource Consumption

    		7.5
    HighCVE-2020-7509

    Easergy T300 (Firmware version 1.5.2 and older): Improper Privilege Management

    		7.2
    HighCVE-2021-22771

    Schneider Electric Easergy T300 Firmware: Improper Neutralization of Formula Elements in a CSV File

    		7.3
    MediumCVE-2020-28218

    Easergy T300 (firmware 2.7 and older): Improper Restriction of Rendered UI Layers or Frames

    		6.5
    MediumCVE-2021-22770

    Schneider Electric Easergy T300 Firmware: Exposure of Sensitive Information to an Unauthorized Actor

    		6.5
    MediumCVE-2020-7504

    Easergy T300 (Firmware version 1.5.2 and older): Improper Input Validation

    		5.3
    HighCVE-2020-7505

    Easergy T300 (Firmware version 1.5.2 and older): Download of Code Without Integrity Check

    		7.2
    HighCVE-2020-7511

    Easergy T300 (Firmware version 1.5.2 and older): Use of a Broken or Risky Cryptographic Algorithm

    		7.5
    HighCVE-2020-7513

    Easergy T300 (Firmware version 1.5.2 and older): Cleartext Storage of Sensitive Information

    		7.5
    MediumCVE-2020-25180

    Rockwell Automation ISaGRAF5 Runtime Use of Hard-coded Cryptographic Key

    		5.3
    HighCVE-2020-7503

    Easergy T300 (Firmware version 1.5.2 and older): Cross-Site Request Forgery (CSRF)

    		8.8
    HighCVE-2020-28217

    Easergy T300 (firmware 2.7 and older): Missing Encryption of Sensitive Data

    		7.5
    HighCVE-2020-28216

    Easergy T300 (firmware 2.7 and older): Missing Encryption of Sensitive Data

    		7.5
    HighCVE-2020-25184

    Rockwell Automation ISaGRAF5 Runtime Unprotected Storage of Credentials

    		7.8
    MediumCVE-2020-25182

    Rockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path Element

    		6.7
    MediumCVE-2021-22769

    Schneider Electric Easergy T300 Firmware: Files or Directories Accessible to External Parties

    		4.3

    All products by Schneider Electric