What is CVE-2020-7504?

CVE-2020-7504 is a medium-severity vulnerability in Schneider-Electric Easergy T300, classified under Improper Input Validation. CVSS score: 5.3/10. Published 2020-06-16.

How severe is CVE-2020-7504?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Improper input validation in Schneider-Electric Easergy T300

CVE-2020-7504

A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to disable the webserver service on the device when specially crafted network packets are sent.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.013 (66.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Schneider-electric Easergy_t300
Schneider-electric Easergy_t300_firmware
N/a Easergy T300 (Firmware Version 1.5.2 And Older) — versions Easergy T300 (Firmware version 1.5.2 and older)

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cybersecurity@se.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-7504?: CVE-2020-7504 is a medium-severity vulnerability in Schneider-Electric Easergy T300, classified under Improper Input Validation. CVSS score: 5.3/10. Published 2020-06-16.
How severe is CVE-2020-7504?: Medium severity. CVSS v3 base score is 5.3 out of 10.