CVE-2020-28216: High severity schneider electric easergy t300 vulnerability
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protocol.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-28216?
CVE-2020-28216 is considered to be of medium severity due to its potential to expose sensitive data over unencrypted HTTP traffic.
How do I fix CVE-2020-28216?
To fix CVE-2020-28216, upgrade the Easergy T300 firmware to version 2.8 or later, which implements proper encryption of sensitive data.
Who is affected by CVE-2020-28216?
CVE-2020-28216 affects users of Schneider Electric's Easergy T300 firmware versions 2.7 and earlier.
What type of vulnerability is CVE-2020-28216?
CVE-2020-28216 is a CWE-311 vulnerability, specifically relating to missing encryption of sensitive data in network communications.
What impact does CVE-2020-28216 have on systems?
The impact of CVE-2020-28216 allows an attacker to read sensitive data from network traffic, increasing the risk of information disclosure.