Easergy T200 (IEC104) Models: T200I, T200E, T200P, T200S, T200H vulnerabilities
3 known vulnerabilities in Easergy T200 (IEC104) Models: T200I, T200E, T200P, T200S, T200H from Schneider Electric. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Easergy T200 (Modbus) Models: T200I, T200E…: Files or Directories Accessible to External Parties
CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow unauthenticated files and logs exfiltration and download of files when an attacker modifies the URL to download to a different location.
- 9.8 Critical severity
Easergy T200 (Modbus) Models: T200I, T200E…: Improper Restriction of Excessive Authentication Attempts
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover and unauthorized access to the system when an attacker conducts brute-force attacks against the login form.
- 8.2 High severity
Easergy T200 (Modbus) Models: T200I, T200E…: Improper Neutralization of Input During Web Page Generation
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an attacker injects then executes arbitrary malicious JavaScript code within the context of the product.