What’s Vulnerable › Vulnerabilities

CVE-2020-7506

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-06-16 · updated 2026-06-17
• Weakness: CWE-200

Description

A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.

Affected products

• Easergy T300 (Firmware version 1.5.2 and older): through 1.5.2

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2020-161-04
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2020-161-04

Get alerted when CVE-2020-7506 or the next vulnerability affects your stack