CVE-2020-28217

published 2020-12-11

CVE-2020-28217: A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protocol.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	easergy_t300_firmware	<= 2.7	—

CWE-311