CVE-2020-7519 — Weak Password Requirements in Easergy Builder

CWE-521 — Weak Password Requirements3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.3%
top 48.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Schneider-electric Easergy Builder
Timeline
PublishedJul 23
Latest updateMay 24

Description

A CWE-521: Weak Password Requirements vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to compromise a user account.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-q3h2-mgqx-8rg3: A CWE-521: Weak Password Requirements vulnerability exists in Easergy Builder (Version 1↗2022-05-24
▶
CVEList
CVE-2020-7519: A CWE-521: Weak Password Requirements vulnerability exists in Easergy Builder (Version 1↗2020-07-23
▶
CVE-2020-7519 — Weak Password Requirements | cvebase