by Kastro
Paper/Archive/CVE-2020-28215

CVE-2020-28215

schneider — A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems…

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 83.6.836 × 2016.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently.

Affected

ProductAffectedFixed inSource
Easergy T300 (firmware 2.7 and older)Easergy T300 (firmware 2.7 and older)–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refse.com/ww/en/download/document/SEVD-2020-315-06refus-cert.cisa.gov/ics/advisories/icsa-20-343-03