Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-2051 EUVD-2024-27016GHSA-jvxm-6mgq-929w

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover and unauthorized …

Published Mar 18, 2024 · Updated Aug 28, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: Easergy T200 (DNP3) Models: T200I, T200E, T200P, T200S, T200H Product: Easergy T200 (IEC104) Models: T200I, T200E, T200P, T200S, T200H Product: Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H Category: ICS / OT

Description

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that
could cause account takeover and unauthorized access to the system when an attacker
conducts brute-force attacks against the login form.

Affected products

VendorProductAffectedFixed
Schneider Electric Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H SC2-04MOD-07000104 – ≤ prior —
Schneider Electric Easergy T200 (IEC104) Models: T200I, T200E, T200P, T200S, T200H SC2-04IEC-07000104 – ≤ prior —
Schneider Electric Easergy T200 (DNP3) Models: T200I, T200E, T200P, T200S, T200H SC2-04DNP-07000104 – ≤ prior —

Advisories 1

References