https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:14:54.226865+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04323 bdu:2021-04323 2026-10-03T13:14:54.331517+00:00 bdu:2021-04323 https://cve.radiocsirt.org/vuln/cnvd-2021-19764 cnvd-2021-19764 2026-10-03T13:14:54.331554+00:00 cnvd-2021-19764 https://cve.radiocsirt.org/vuln/euvd-2026-47007 EUVD-2026-47007 2026-10-03T13:14:54.331569+00:00 EUVD-2026-47007 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28216 fkie_cve-2020-28216 2026-10-03T13:14:54.331581+00:00

A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protocol.

 https://cve.radiocsirt.org/vuln/ghsa-ggxv-vqqm-7f4w GHSA-ggxv-vqqm-7f4w 2026-10-03T13:14:54.331610+00:00

A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker to read network traffic over HTTP protocol.

 https://cve.radiocsirt.org/vuln/gsd-2020-28216 gsd-2020-28216 2026-10-03T13:14:54.331625+00:00 gsd-2020-28216 https://cve.radiocsirt.org/vuln/icsa-20-343-03 ICSA-20-343-03 — Schneider Electric Easergy T300 2026-10-03T13:14:54.331643+00:00

The affected product is vulnerable to a missing authentication for critical function vulnerability, which may allow an attacker to expose information, cause a denial-of-service condition, and remotely execute arbitrary code.CVE-2020-7561 has been assigned to this vulnerability. A CVSS v3 base score of 10.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H). The affected product is vulnerable to a missing authorization vulnerability, which may allow an attacker to gain access to sensitive information, cause a denial-of-service condition, and remotely execute arbitrary code when access control checks are not applied consistently.CVE-2020-28215 has been assigned to this vulnerability. A CVSS v3 base score of 7.7 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H). The affected product is vulnerable to a missing encryption of sensitive data vulnerability, which may allow an attacker to read network traffic over HTTP protocol.CVE-2020-28216 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). The affected product is vulnerable to a missing encryption of sensitive data vulnerability, which may allow an attacker to read network traffic over IEC60870-5-104 protocol.CVE-2020-28217 has been assigned to this vulnerability. A CVSS v3 base score of 6.7 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:N/UI:N/S:…

 https://cve.radiocsirt.org/vuln/sevd-2020-315-06 SEVD-2020-315-06 — Easergy T300 2026-10-03T13:14:54.331683+00:00

Schneider Electric is aware of a vulnerability in its Easergy T300 RTU (Remote Terminal Unit). The Easergy T300 is a modular platform for medium voltage and low voltage public distribution network management. Failure to apply the remediation provided below may allow unauthorized access to the internal product LAN (local area network). December 2020 Update: Additional CVEs have been added to this disclosure (marked in red). No additional action is required for customers who have already followed the remediation instructions provided below.