CVE-2020-7510: Infoleak
Published Jun 16, 2020
·Updated
A CWE-200: Information Exposure vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow attacker to obtain private keys.
Affected Software
2 affected components
Schneider-electric Easergy T300 Firmware<=1.5.2
Schneider-electric Easergy T300
Event History
Jun 16, 2020
CVE Published
via MITRE·07:44 PM
Data Sourced
via MITRE·07:44 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-7510?
The severity of CVE-2020-7510 is rated as high with a CVSS score of 7.5.
2
How can I fix the CWE-200 vulnerability in Easergy T300?
To fix the CWE-200 vulnerability in Easergy T300, update the firmware to version 1.5.3 or higher.
3
What is the CWE number associated with the Easergy T300 vulnerability?
The CWE number associated with the Easergy T300 vulnerability is CWE-200, which relates to Information Exposure.
4
Can an attacker obtain private keys using CVE-2020-7510?
Yes, the CVE-2020-7510 vulnerability could allow an attacker to obtain private keys in Easergy T300 firmware version 1.5.2 and older.