Vulnerabilities (CVE)

Filtered by vendor Schneider-electric Subscribe
Filtered by product Easergy T300
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-22769 1 Schneider-electric 2 Easergy T300, Easergy T300 Firmware 2021-09-20 4.0 MEDIUM 4.3 MEDIUM
A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that could expose files or directory content when access from an attacker is not restricted or incorrectly restricted.
CVE-2021-22770 1 Schneider-electric 2 Easergy T300, Easergy T300 Firmware 2021-07-27 4.0 MEDIUM 6.5 MEDIUM
A CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and older that exposes sensitive information to an actor not explicitly authorized to have access to that information.
CVE-2020-28218 1 Schneider-electric 2 Easergy T300, Easergy T300 Firmware 2020-12-14 4.3 MEDIUM 6.5 MEDIUM
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to trick a user into initiating an unintended action.
CVE-2020-7504 1 Schneider-electric 2 Easergy T300, Easergy T300 Firmware 2020-06-17 5.0 MEDIUM 5.3 MEDIUM
A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to disable the webserver service on the device when specially crafted network packets are sent.