CVE-2020-28218: Medium severity schneider electric easergy t300 vulnerability
Published Dec 11, 2020
·Updated
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to trick a user into initiating an unintended action.
Affected Software
3 affected components
Schneider Electric Easergy T300 with firmware Versions 2.7 and prior
Schneider-electric Easergy T300 Firmware<=2.7
Schneider-electric Easergy T300
Event History
Dec 11, 2020
CVE Published
via MITRE·12:51 AM
Data Sourced
via MITRE·12:51 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-28218?
The severity of CVE-2020-28218 is rated as medium with a CVSS score of 6.5.
2
How can I identify if my system is affected by CVE-2020-28218?
Systems running Easergy T300 firmware version 2.7 and older may be affected by CVE-2020-28218.
3
What is the CWE associated with CVE-2020-28218?
CVE-2020-28218 is associated with CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability.