CVE-2020-7503: CSRF
Published Jun 16, 2020
·Updated
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to execute malicious commands on behalf of a legitimate user when xsrf-token data is intercepted.
Affected Software
2 affected components
Schneider-electric Easergy T300 Firmware<=1.5.2
Schneider-electric Easergy T300
Event History
Jun 16, 2020
CVE Published
via MITRE·07:42 PM
Data Sourced
via MITRE·07:42 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-7503?
CVE-2020-7503 is classified as a medium severity vulnerability due to its potential impact on user authentication and command execution.
2
How do I fix CVE-2020-7503?
To mitigate CVE-2020-7503, users should upgrade to Easergy T300 firmware version 1.5.3 or later.
3
What systems are affected by CVE-2020-7503?
CVE-2020-7503 affects Easergy T300 firmware versions 1.5.2 and older.
4
What type of vulnerability is CVE-2020-7503?
CVE-2020-7503 is a Cross-Site Request Forgery (CSRF) vulnerability.
5
How can attackers exploit CVE-2020-7503?
Attackers can exploit CVE-2020-7503 by intercepting xsrf-token data to execute malicious commands on behalf of legitimate users.