[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9cGT09p8uB5qIvr79rmwYBFSNTVXMpGP4sbHqKHr6rM":3,"g5a-ex:schneider-electric\u002Feasergy_t300@*":90,"g5a-family:schneider-electric\u002Feasergy_t300":92},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":67,"seoMetadata":68,"meta":87},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"schneider-electric","easergy_t300",0,24,"2022-03-18",[],"Easergy T300 by Schneider-electric is a technology product and 24 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,24,29,34,40,45,48,53,57,61],{"cveId":17,"description":18,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":23},"CVE-2020-25176","Some commands used by the Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protocol perform various file operations in the file system. Since the parameter pointing to the file name is not checked for reserved characters, it is possible for a remote, unauthenticated attacker to traverse an application’s directory, which could lead to remote code execution.",9.8,"v3.1","Critical",false,0.06421,{"cveId":25,"description":26,"publishedDate":27,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":28},"CVE-2020-7561","A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of problems, including information exposure, denial of service, and command execution when access to a resource from an attacker is not restricted or incorrectly restricted.","2020-11-19",0.03163,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":33},"CVE-2020-28215","A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently.","2020-12-11",0.02339,{"cveId":35,"description":36,"publishedDate":11,"cvssScore":37,"cvssVersion":20,"severity":38,"isKev":22,"epssScore":39},"CVE-2020-25178","ISaGRAF Workbench communicates with Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x using TCP\u002FIP. This communication protocol provides various file system operations, as well as the uploading of applications. Data is transferred over this protocol unencrypted, which could allow a remote unauthenticated attacker to upload, read, and delete files.",8.8,"High",0.01691,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":44},"CVE-2020-7508","A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to gain full access by brute force.","2020-06-16",0.01433,{"cveId":46,"description":47,"publishedDate":43,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":44},"CVE-2020-7512","A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to exploit the component.",{"cveId":49,"description":50,"publishedDate":43,"cvssScore":51,"cvssVersion":20,"severity":38,"isKev":22,"epssScore":52},"CVE-2020-7510","A CWE-200: Information Exposure vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow attacker to obtain private keys.",7.5,0.01378,{"cveId":54,"description":55,"publishedDate":43,"cvssScore":51,"cvssVersion":20,"severity":38,"isKev":22,"epssScore":56},"CVE-2020-7506","A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.",0.0131,{"cveId":58,"description":59,"publishedDate":43,"cvssScore":51,"cvssVersion":20,"severity":38,"isKev":22,"epssScore":60},"CVE-2020-7507","A CWE-400: Uncontrolled Resource Consumption vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to login multiple times resulting in a denial of service.",0.01276,{"cveId":62,"description":63,"publishedDate":43,"cvssScore":64,"cvssVersion":20,"severity":65,"isKev":22,"epssScore":66},"CVE-2020-7504","A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to disable the webserver service on the device when specially crafted network packets are sent.",5.3,"Medium",0.01256,[],{"title":69,"metaDescription":70,"keywords":71,"structuredData":72},"Easergy T300 by Schneider-electric - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Easergy T300 by Schneider-electric with 24 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Easergy T300 vulnerabilities, Easergy T300 security, Easergy T300 CVE, Schneider-electric Easergy T300, Easergy T300 threat intelligence, Schneider-electric security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":73,"@type":74,"name":75,"description":70,"url":76,"manufacturer":77,"applicationCategory":81,"softwareVersion":82,"mainEntity":83},"https:\u002F\u002Fschema.org","SoftwareApplication","Easergy T300","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fschneider-electric\u002Feasergy_t300",{"@type":78,"name":79,"url":80},"Organization","Schneider-electric","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fschneider-electric","Security Software","Multiple versions",{"@type":84,"name":85,"description":86,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Easergy T300 Security Vulnerabilities","Security vulnerabilities affecting Easergy T300 by Schneider-electric",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":88,"apiVersion":89},"2026-10-19T05:15:34.771Z","3.0",{"rows":91,"total":9,"capped":22,"failed":9},[],[93],{"product":94,"cves":10},"easergy_t300_firmware"]