What is CVE-2020-7505?

CVE-2020-7505 is a high-severity vulnerability in Schneider-Electric Easergy T300, classified under Download of Code Without Integrity Check. CVSS score: 7.2/10. Published 2020-06-16.

How severe is CVE-2020-7505?

High severity. CVSS v3 base score is 7.2 out of 10.

Vulnerability in Schneider-Electric Easergy T300

CVE-2020-7505

A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to inject data with dangerous content into the firmware and execute arbitrary code on the system.

EPSS: 0.009 (56.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Schneider-electric Easergy_t300
Schneider-electric Easergy_t300_firmware
N/a Easergy T300 (Firmware Version 1.5.2 And Older) — versions Easergy T300 (Firmware version 1.5.2 and older)

Weakness classification (CWE)

CWE-494 — Download of Code Without Integrity Check

References

cybersecurity@se.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-7505?: CVE-2020-7505 is a high-severity vulnerability in Schneider-Electric Easergy T300, classified under Download of Code Without Integrity Check. CVSS score: 7.2/10. Published 2020-06-16.
How severe is CVE-2020-7505?: High severity. CVSS v3 base score is 7.2 out of 10.