Improper Authentication Control in Easergy T300 by Schneider Electric

CVE-2020-7508

What is CVE-2020-7508?

The Easergy T300 from Schneider Electric is affected by a vulnerability that allows attackers to exploit improper restrictions on authentication attempts. This flaw, found in firmware version 1.5.2 and earlier, enables an attacker to perform brute force attacks, potentially leading to unauthorized access to the system. Users should update their firmware to secure their devices against these threats.

References