Schneider Electric Easergy T300

🗓️ 08 Dec 2020 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 71 Views

Schneider Electric Easergy T300 with critical vulnerabilities including Missing Authentication, Missing Authorization, Missing Encryption, and Improper UI Restriction exposing to LAN unauthorized access, sensitive data exposure, denial of service, and remote code execution

Reporter	Title	Published	Views	Family All 46
BDU FSTEC	The vulnerability of the microprogramming software of the modular controller for automation of transformer substations—Schneider Electric Easergy T300 module SC150—is related to incorrect user authentication. This vulnerability allows a intruder to view and modify the device configuration file.	14 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the modular controller for transformer substations automation by Schneider Electric Easergy T300 RTU, related to access control deficiencies, allows a intruder to gain unauthorized access to protected information, cause service failures, or execute arbitrary commands.	23 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the modular controller for automation of transformer substations from Schneider Electric Easergy T300 RTU lies in the lack of encryption measures for protected data. This allows an intruder to gain unauthorized access to network traffic via the HTTP protocol.	2 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 RTU in transformer substations, related to errors in information representation by the user interface, allows a intruder to perform arbitrary actions.	2 Sep 202100:00	–	bdu_fstec
Circl	CVE-2020-7561	20 Nov 202000:42	–	circl
CNNVD	Schneider Electric Easergy T300 Access Control Error Vulnerability	19 Nov 202000:00	–	cnnvd
CNNVD	Schneider Electric Easergy T300 安全漏洞	8 Dec 202000:00	–	cnnvd
CNNVD	Schneider Electric Easergy T300 访问控制错误漏洞	8 Dec 202000:00	–	cnnvd
CNNVD	Schneider Electric Easergy T300 安全漏洞	8 Dec 202000:00	–	cnnvd
CNNVD	Schneider Electric Easergy T300 安全漏洞	8 Dec 202000:00	–	cnnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2020/icsa-20-343-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-20-343-03
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
us-cert	www.us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B

08 Dec 2020 00:00Current

9High risk

Vulners AI Score9

CVSS 27.5

CVSS 3.19.8

EPSS0.03032