What is CVE-2020-7492?

CVE-2020-7492 is a medium-severity vulnerability in Schneider-Electric Gp-Pro Ex Firmware, classified under Weak Password Requirements. CVSS score: 6.5/10. Published 2020-06-16.

How severe is CVE-2020-7492?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Schneider-Electric Gp-Pro Ex Firmware

CVE-2020-7492

A CWE-521: Weak Password Requirements vulnerability exists in the GP-Pro EX V1.00 to V4.09.100 which could cause the discovery of the password when the user is entering the password because it is not masqueraded.

EPSS: 0.011 (63.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.

Affected products

Schneider-electric Gp-pro_ex_firmware
N/a Gp-pro Ex V1.00 To V4.09.100 — versions GP-Pro EX V1.00 to V4.09.100

Weakness classification (CWE)

CWE-521 — Weak Password Requirements

References

cybersecurity@se.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-7492?: CVE-2020-7492 is a medium-severity vulnerability in Schneider-Electric Gp-Pro Ex Firmware, classified under Weak Password Requirements. CVSS score: 6.5/10. Published 2020-06-16.
How severe is CVE-2020-7492?: Medium severity. CVSS v3 base score is 6.5 out of 10.