critical9.8
CVE-2020-7548
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version i…
Impact
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) that could allow unauthorized users to login.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Acti9 Smartlink Si D Firmware | before 002.004.002 |
| Schneider-Electric | Acti9 Smartlink Si B Firmware | before 002.004.002 |
| Schneider-Electric | Acti9 Powertag Link Firmware | before 001.008.007 |
| Schneider-Electric | Acti9 Powertag Link Hd Firmware | before 001.008.007 |
| Schneider-Electric | Acti9 Smartlink El B Firmware | before 1.2.1 |
| Schneider-Electric | Wiser Link Firmware | before 1.5.0 |
| Schneider-Electric | Wiser Energy Firmware | before 1.5.0 |