What is CVE-2020-7506?

CVE-2020-7506 is a high-severity vulnerability in Schneider-Electric Easergy T300, classified under Information Disclosure. CVSS score: 7.5/10. Published 2020-06-16.

How severe is CVE-2020-7506?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in Schneider-Electric Easergy T300

CVE-2020-7506

A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.

Vulnerability class: Information Disclosure

EPSS: 0.013 (67.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Schneider-electric Easergy_t300
Schneider-electric Easergy_t300_firmware
N/a Easergy T300 Firmware V1.5.2 And Prior — versions Easergy T300 Firmware V1.5.2 and prior

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cybersecurity@se.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2020-7506?: CVE-2020-7506 is a high-severity vulnerability in Schneider-Electric Easergy T300, classified under Information Disclosure. CVSS score: 7.5/10. Published 2020-06-16.
How severe is CVE-2020-7506?: High severity. CVSS v3 base score is 7.5 out of 10.