https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 20:51:01 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-02722 bdu:2020-02722 https://cve.radiocsirt.org/vuln/bdu:2020-02722 https://cve.radiocsirt.org/vuln/certfr-2020-avi-357 certfr-2020-avi-357 https://cve.radiocsirt.org/vuln/certfr-2020-avi-357 https://cve.radiocsirt.org/vuln/cnvd-2021-21473 cnvd-2021-21473 https://cve.radiocsirt.org/vuln/cnvd-2021-21473 https://cve.radiocsirt.org/vuln/euvd-2026-38008 EUVD-2026-38008 https://cve.radiocsirt.org/vuln/euvd-2026-38008 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7505 <p>A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to inject data with dangerous content into the firmware and execute arbitrary code on the system.</p> <p>A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to inject data with dangerous content into the firmware and execute arbitrary code on the system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7505 https://cve.radiocsirt.org/vuln/ghsa-qfhq-q296-49fr <p>A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to inject data with dangerous content into the firmware and execute arbitrary code on the system.</p> <p>A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to inject data with dangerous content into the firmware and execute arbitrary code on the system.</p> https://cve.radiocsirt.org/vuln/ghsa-qfhq-q296-49fr https://cve.radiocsirt.org/vuln/gsd-2020-7505 gsd-2020-7505 https://cve.radiocsirt.org/vuln/gsd-2020-7505 https://cve.radiocsirt.org/vuln/sevd-2020-161-04 <p>Researchers from Rostelecom-Solar have made Schneider Electric aware of multiple vulnerabilities affecting the company’s Easergy T300 product. Schneider Electric has worked closely with the researchers to remediate the vulnerabilities. We appreciate their collaboration and commitment to transparency. The vulnerabilities have been remediated via a free firmware update, which is available immediately by contacting Schneider Electric’s Customer Care Center. Access to the customer’s network is required for the majority of the disclosed vulnerabilities to be exploited. Therefore, if the customer’s network is well protected and monitored for intrusion, and care is taken to obtain software updates from a trusted source, the general risk of exploitation can be substantially minimized. Schneider Electric encourages customers to upgrade to the new firmware as soon as possible. The company further encourages customers to ensure any firmware files used to update the device are acquired from trusted sources; to operate the products on properly segmented control networks; to adequately secure any workstation that has been configured to have access to the product; and to follow the remediation and general security recommendations below. T300 is a grid automation platform that is typically deployed to medium voltage (2400-69000 VAC) substation cabinets.</p> <p>Researchers from Rostelecom-Solar have made Schneider Electric aware of multiple vulnerabilities affecting the company’s Easergy T300 product. Schneider Electric has worked closely with the researchers to remediate the vulnerabilities. We appreciate their collaboration and commitment to transparency. The vulnerabilities have been remediated via a free firmware update, which is available immediately by contacting Schneider Electric’s Customer Care Center. Access to the customer’s network is required for the majority of the disclosed vulnerabilities to be exploited. Therefore, if the customer’s network is well protected and monitored for intrusion, and care is taken to obtain software updates from a trusted source, the general risk of exploitation can be substantially minimized. Schneider Electric encourages customers to upgrade to the new firmware as soon as possible. The company further encourages customers to ensure any firmware files used to update the device are acquired from trusted sources; to operate the products on properly segmented control networks; to adequately secure any workstation that has been configured to have access to the product; and to follow the remediation and general security recommendations below. T300 is a grid automation platform that is typically deployed to medium voltage (2400-69000 VAC) substation cabinets.</p> https://cve.radiocsirt.org/vuln/sevd-2020-161-04