critical9.8
CVE-2020-28215
A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including informatio…
Impact
A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Easergy T300 Firmware | through 2.7 |