CVE-2020-7506

2020-06-1619:43:23

CWE-200

schneider

www.cve.org

EPSS

0.002

Percentile

53.8%

JSON

A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.

CNA Affected

[
  {
    "product": "Easergy T300 Firmware V1.5.2 and prior",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Easergy T300 Firmware V1.5.2 and prior"
      }
    ]
  }
]

References

download.schneider-electric.com/files?p_Doc_Ref=SEVD-2020-161-04

EPSS

0.002

Percentile

53.8%

JSON

Related for CVELIST:CVE-2020-7506