Code injection

2020-12-1101:15:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

JSON

A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protocol.

CPENameOperatorVersion
easergy_t300_firmwarele2.7

CPE	Name	Operator	Version
	easergy_t300_firmware	le	2.7

References

us-cert.cisa.gov/ics/advisories/icsa-20-343-03

www.se.com/ww/en/download/document/SEVD-2020-315-06/