Hard-Coded Cryptographic Key Vulnerability in Easergy Builder by Schneider Electric

CVE-2020-7515

Summary

A vulnerability exists in Easergy Builder that allows the use of hard-coded cryptographic keys stored in cleartext. This flaw can potentially enable an attacker to decrypt sensitive passwords, exposing critical security data and increasing the risk of unauthorized access. Users of Easergy Builder V1.4.7.2 and previous versions should take immediate action to mitigate this risk as outlined in the official guidance from Schneider Electric.

References