Improper UI Layer Restriction Vulnerability in Easergy T300 by Schneider Electric
CVE-2020-28218

6.5MEDIUM

Key Information:

Vendor
Schneider Electric
Status
Easergy T300 (firmware 2.7 And Older)
Vendor
CVE Published:
11 December 2020

Summary

The Easergy T300 by Schneider Electric has a vulnerability that allows an attacker to manipulate the user interface layers or frames. This could trick users into executing unintended actions, potentially leading to unauthorized access or control over system functionalities. It is crucial for users of this firmware version 2.7 and older to be aware of this risk and implement necessary security measures to safeguard against potential exploitation.

Affected Version(s)

Easergy T300 (firmware 2.7 and older) Easergy T300 (firmware 2.7 and older)

References

https://www.se.com/ww/en/download/document/SEVD-2020-315-06/
x_refsource_CONFIRM
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-03
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.