Lucene search

[email protected]CVE-2020-7509

HistoryJun 16, 2020 - 8:15 p.m.

CVE-2020-7509

2020-06-1620:15:15

CWE-269

[email protected]

web.nvd.nist.gov

cve-2020-7509

cwe-269

easergy t300

firmware

privilege management

vulnerability

privilege escalation

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

A CWE-269: Improper privilege management (write) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to elevate their privileges and delete files.

Affected configurations

NVD

Node

schneider-electriceasergy_t300_firmwareRange≤1.5.2

AND

schneider-electriceasergy_t300Match-

CPENameOperatorVersion
schneider-electric:easergy_t300_firmwareschneider-electric easergy t300 firmwarele1.5.2

CPE	Name	Operator	Version
schneider-electric:easergy_t300_firmware	schneider-electric easergy t300 firmware	le	1.5.2

CNA Affected

[
  {
    "product": "Easergy T300 (Firmware version 1.5.2 and older)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Easergy T300 (Firmware version 1.5.2 and older)"
      }
    ]
  }
]

References

www.se.com/ww/en/download/document/SEVD-2020-161-04

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

Related for CVE-2020-7509

nvd1 cvelist1 prion1