CVE-2020-7509: High severity schneider electric easergy t300 firmware vulnerability
Published Jun 16, 2020
·Updated
A CWE-269: Improper privilege management (write) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to elevate their privileges and delete files.
Affected Software
2 affected components
Schneider-electric Easergy T300 Firmware<=1.5.2
Schneider-electric Easergy T300
Event History
Jun 16, 2020
CVE Published
via MITRE·07:44 PM
Data Sourced
via MITRE·07:44 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-7509?
CVE-2020-7509 has been classified as a critical vulnerability due to its potential to allow privilege escalation.
2
How do I fix CVE-2020-7509?
To fix CVE-2020-7509, update the Easergy T300 firmware to version 1.5.3 or later.
3
What kind of attack is possible with CVE-2020-7509?
CVE-2020-7509 allows an attacker to elevate their privileges and delete files on affected devices.
4
Which devices are affected by CVE-2020-7509?
CVE-2020-7509 affects Schneider Electric's Easergy T300 firmware version 1.5.2 and older.
5
What is the nature of the vulnerability in CVE-2020-7509?
CVE-2020-7509 is categorized under improper privilege management, specifically related to write capabilities.