CVEvulnerability

CVE-2020-7505

7.2 HIGH Published 2020-06-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-06-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-494

Description

A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to inject data with dangerous content into the firmware and execute arbitrary code on the system.

Affected configurations

• schneider-electric easergy t300 firmware (<= 1.5.2)

Related

Weakness · CWE (1)

  • CWE-494 Download of Code Without Integrity Check weakness

References