Lucene search

SchneiderCVE-2020-7504

HistoryJun 16, 2020 - 8:15 p.m.

CVE-2020-7504

2020-06-1620:15:15

CWE-20

schneider

web.nvd.nist.gov

cve-2020-7504

improper input validation

easergy t300

firmware

security vulnerability

network packet

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

39.5%

JSON

A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to disable the webserver service on the device when specially crafted network packets are sent.

Affected configurations

Nvd

Node

schneider-electriceasergy_t300_firmwareRange≤1.5.2

AND

schneider-electriceasergy_t300Match-

VendorProductVersionCPE
schneider-electriceasergy_t300_firmware*cpe:2.3:o:schneider-electric:easergy_t300_firmware:*:*:*:*:*:*:*:*
schneider-electriceasergy_t300-cpe:2.3:h:schneider-electric:easergy_t300:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
schneider-electric	easergy_t300_firmware	*	cpe:2.3:o:schneider-electric:easergy_t300_firmware::::::::
schneider-electric	easergy_t300	-	cpe:2.3:h:schneider-electric:easergy_t300:-:::::::*

CNA Affected

[
  {
    "product": "Easergy T300 (Firmware version 1.5.2 and older)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Easergy T300 (Firmware version 1.5.2 and older)"
      }
    ]
  }
]

References

www.se.com/ww/en/download/document/SEVD-2020-161-04

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

39.5%

JSON

Related for CVE-2020-7504