CVE-2020-28215 - A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently

Back Back to CVE browser

CRITICAL

A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently

Published Dec 11, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.34%

Description

A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently.

Affected products

Vendor n/a Product Easergy T300 (firmware 2.7 and older) Default
unknown
Affected
- Easergy T300 (firmware 2.7 and older)

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Easergy T300 (firmware 2.7 and older)	unknown	Affected Easergy T300 (firmware 2.7 and older)

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-20699
Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-03
x_refsource_MISCThird Party Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-315-06/
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-20699		Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-03		x_refsource_MISCThird Party Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-315-06/		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner schneider

Published Dec 11, 2020

Updated Aug 4, 2024

Reserved Nov 5, 2020

Link CVE-2020-28215

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-28215

Red Hat

No data

ENISA EUVD

Assigner schneider

Published Dec 11, 2020

Updated Aug 4, 2024

Link EUVD-2020-20699

GitHub

No data