Description
CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow
unauthenticated files and logs exfiltration and download of files when an attacker modifies the
URL to download to a different location.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H | SC2-04MOD-07000104 – ≤ prior | — |
| Schneider Electric | Easergy T200 (IEC104) Models: T200I, T200E, T200P, T200S, T200H | SC2-04IEC-07000104 – ≤ prior | — |
| Schneider Electric | Easergy T200 (DNP3) Models: T200I, T200E, T200P, T200S, T200H | SC2-04DNP-07000104 – ≤ prior | — |
Advisories 1
- SEVD-2024-072-01 Easergy T200 Multiple Vulnerabilities Schneider Electric CPCERT · Mar 12, 2024