Schneider Electric Easergy T300 vulnerabilities, page 2
24 vulnerabilities
Known vulnerabilities in Schneider Electric Easergy T300, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-28218schneider-electriceasergy_t300_firmware
EPSS score1.09%
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to trick a user into initiating an unintended action.CVE-2020-28216schneider-electriceasergy_t300_firmwareEPSS score0.51%
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protocol.CVE-2020-28215schneider-electriceasergy_t300_firmwareEPSS score2.34%
A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently.CVE-2020-28217schneider-electriceasergy_t300_firmwareEPSS score0.58%
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protocol.