CVE-2020-28215

published 2020-12-11

CVE-2020-28215: A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	easergy_t300_firmware	<= 2.7	—

CWE-862