Schneider-Electric Easergy T300
24 CVEs affecting Schneider-Electric Easergy T300. Latest disclosed: 2022-03-18. Critical: 5, High: 13.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-28215 | Critical | 9.8 | 2020-12-11 | A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including informatio… |
CVE-2020-7561 | Critical | 9.8 | 2020-11-19 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of pro… |
CVE-2020-7512 | Critical | 9.8 | 2020-06-16 | A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which… |
CVE-2020-7508 | Critical | 9.8 | 2020-06-16 | A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow a… |
CVE-2020-25176 | Critical | 9.1 | 2022-03-18 | Some commands used by the Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protocol perform various file operations in the file sy… |
CVE-2020-7503 | High | 8.8 | 2020-06-16 | A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to execute m… |
CVE-2020-25184 | High | 7.8 | 2022-03-18 | Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x stores the password in plaintext in a file that is in the same directory as the executable file. ISaGR… |
CVE-2020-25178 | High | 7.5 | 2022-03-18 | ISaGRAF Workbench communicates with Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x using TCP/IP. This communication protocol provides various file sy… |
CVE-2020-28217 | High | 7.5 | 2020-12-11 | A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network tra… |
CVE-2020-28216 | High | 7.5 | 2020-12-11 | A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network tra… |
CVE-2020-7513 | High | 7.5 | 2020-06-16 | A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to… |
CVE-2020-7511 | High | 7.5 | 2020-06-16 | A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attack… |
CVE-2020-7510 | High | 7.5 | 2020-06-16 | A CWE-200: Information Exposure vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow attacker to obtain private keys. |
CVE-2020-7507 | High | 7.5 | 2020-06-16 | A CWE-400: Uncontrolled Resource Consumption vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to login mul… |
CVE-2020-7506 | High | 7.5 | 2020-06-16 | A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive wi… |
CVE-2021-22771 | High | 7.3 | 2021-07-21 | A CWE-1236: Improper Neutralization of Formula Elements in a CSV File vulnerability exists in Easergy T300 with firmware V2.7.1 and older that would allow arbi… |
CVE-2020-7509 | High | 7.2 | 2020-06-16 | A CWE-269: Improper privilege management (write) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to eleva… |
CVE-2020-7505 | High | 7.2 | 2020-06-16 | A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to inj… |
CVE-2020-25182 | Medium | 6.7 | 2022-03-18 | Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allo… |
CVE-2021-22770 | Medium | 6.5 | 2021-07-21 | A CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and older that exposes sensitive information to an actor not explicit… |