CVE-2020-7561

published 2020-11-19

CVE-2020-7561: A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of problems, including information exposure, denial of service, and command execution when access to a resource from an attacker is not restricted or incorrectly restricted.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	easergy_t300_firmware	<= 2.7	—

CWE-284 CWE-306