Summary
Schneider Electric is aware of multiple vulnerabilities in its Easergy T200 products.
The Easergy T200 RTU Product Line (T200I, T200E, T200P) is a modular platform for medium voltage and low voltage public distribution network management. Note, this product has been obsoleted since December 31st, 2021, and is no longer available for purchase.
Failure to apply the remediations provided below may allow a brute force attack, which could result in unauthorized data access, and/or compromise of the device.
Vulnerabilities 3
-
Critical 9.8
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeov…
-
High 8.2
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when …
-
High 7.5
CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow unauthenticated file…
Revision history
-
#1.0.0
Original Release
References
-
Easergy T200 Multiple Vulnerabilities - SEVD-2024-072-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-072-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-072-01.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/