Description
A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Easergy T300 Firmware V1.5.2 and prior | Easergy T300 Firmware V1.5.2 and prior | — |
Advisories 1
- SEVD-2020-161-04 Easergy T300 Schneider Electric CPCERT · May 13, 2021