VULNERABILITY INTELLIGENCE

CVE-2020-7506

CVSS score7.5 HIGH
EPSS probability1.34%
CISA KEVNot currently listed
Published2020-06-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.

Weakness classification

  • cybersecurity@se.com: CWE-200
  • nvd@nist.gov: CWE-200

Primary references