Summary
Researchers from Rostelecom-Solar have made Schneider Electric aware of multiple
vulnerabilities affecting the company’s Easergy T300 product. Schneider Electric has worked
closely with the researchers to remediate the vulnerabilities. We appreciate their collaboration
and commitment to transparency. The vulnerabilities have been remediated via a free firmware
update, which is available immediately by contacting Schneider Electric’s Customer Care
Center.
Access to the customer’s network is required for the majority of the disclosed vulnerabilities to
be exploited. Therefore, if the customer’s network is well protected and monitored for intrusion,
and care is taken to obtain software updates from a trusted source, the general risk of
exploitation can be substantially minimized.
Schneider Electric encourages customers to upgrade to the new firmware as soon as possible.
The company further encourages customers to ensure any firmware files used to update the
device are acquired from trusted sources; to operate the products on properly segmented
control networks; to adequately secure any workstation that has been configured to have
access to the product; and to follow the remediation and general security recommendations
below. T300 is a grid automation platform that is typically deployed to medium voltage (2400-69000 VAC) substation cabinets.
Vulnerabilities 11
-
Unscored —
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) wh…
-
Unscored —
A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could…
-
Unscored —
A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and old…
-
Unscored —
A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an a…
-
Unscored —
A CWE-400: Uncontrolled Resource Consumption vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) wh…
-
Unscored —
A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in Easergy T300 (Firmware vers…
-
Unscored —
A CWE-269: Improper privilege management (write) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older…
-
Unscored —
A CWE-200: Information Exposure vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could all…
-
Unscored —
A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy T300 (Firmware version 1.5.…
-
Unscored —
A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Easergy T300 …
-
Unscored —
A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy T300 (Firmware version 1.5.2 and …
Revision history
-
#1.1.0
Updated CWE for CVE-2020-7506
-
#1.0.0
Original Release
References
-
Easergy T300 - SEVD-2020-161-04 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2020-161-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2020-161-04_Easergy_T300_Security_Notification_V1.1.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/