CVE-2020-28215: Critical severity schneider electric easergy t300 vulnerability
A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-28215?
CVE-2020-28215 is classified as a CWE-862 Missing Authorization vulnerability which can lead to serious impacts such as information exposure and arbitrary code execution.
How do I fix CVE-2020-28215?
To remediate CVE-2020-28215, upgrade the Easergy T300 firmware to a version newer than 2.7 to ensure proper access control checks are in place.
What systems are affected by CVE-2020-28215?
CVE-2020-28215 affects Schneider Electric Easergy T300 with firmware versions 2.7 and older.
What types of problems can CVE-2020-28215 cause?
CVE-2020-28215 can result in various issues including information exposure, denial of service, and arbitrary code execution due to inconsistent access control checks.
Is there a workaround for CVE-2020-28215?
There are no specific workarounds for CVE-2020-28215; upgrading to the latest firmware version is the recommended solution.