https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:29:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-02731 bdu:2020-02731 https://cve.radiocsirt.org/vuln/bdu:2020-02731 https://cve.radiocsirt.org/vuln/certfr-2020-avi-357 certfr-2020-avi-357 https://cve.radiocsirt.org/vuln/certfr-2020-avi-357 https://cve.radiocsirt.org/vuln/cnvd-2020-46565 cnvd-2020-46565 https://cve.radiocsirt.org/vuln/cnvd-2020-46565 https://cve.radiocsirt.org/vuln/euvd-2026-37923 EUVD-2026-37923 https://cve.radiocsirt.org/vuln/euvd-2026-37923 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7514 <p>A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker access to the authorization credentials for a device and gain full access.</p> <p>A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker access to the authorization credentials for a device and gain full access.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7514 https://cve.radiocsirt.org/vuln/ghsa-9cxm-8wwv-f396 <p>A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker access to the authorization credentials for a device and gain full access.</p> <p>A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker access to the authorization credentials for a device and gain full access.</p> https://cve.radiocsirt.org/vuln/ghsa-9cxm-8wwv-f396 https://cve.radiocsirt.org/vuln/gsd-2020-7514 gsd-2020-7514 https://cve.radiocsirt.org/vuln/gsd-2020-7514 https://cve.radiocsirt.org/vuln/sevd-2020-161-05 <p>Researchers from Rostelecom-Solar have made Schneider Electric aware of multiple vulnerabilities affecting the company’s Easergy Builder configuration tool. Schneider Electric has worked closely with Ilya Karpov and Evgeniy Druzhinin of Rostelecom-Solar to remediate the vulnerabilities and appreciates their collaboration and commitment to transparency. The vulnerabilities have been remediated via a free software update, which is available immediately by contacting Schneider Electric’s Customer Care Center. Access to the customer’s network is required for the majority of the disclosed vulnerabilities to be exploited. Therefore, if the customer’s network is well protected and monitored for intrusion, and care is taken to obtain software updates from a trusted source, the general risk of exploitation can be substantially minimized. Schneider Electric encourages customers to upgrade to the new software as soon as possible. The company further encourages customers to ensure any firmware files used to update the device are acquired from trusted sources; to operate the products on properly segmented control networks; to adequately secure any workstation that has been configured to have access to the product; and to follow the remediation and general security recommendations below.</p> <p>Researchers from Rostelecom-Solar have made Schneider Electric aware of multiple vulnerabilities affecting the company’s Easergy Builder configuration tool. Schneider Electric has worked closely with Ilya Karpov and Evgeniy Druzhinin of Rostelecom-Solar to remediate the vulnerabilities and appreciates their collaboration and commitment to transparency. The vulnerabilities have been remediated via a free software update, which is available immediately by contacting Schneider Electric’s Customer Care Center. Access to the customer’s network is required for the majority of the disclosed vulnerabilities to be exploited. Therefore, if the customer’s network is well protected and monitored for intrusion, and care is taken to obtain software updates from a trusted source, the general risk of exploitation can be substantially minimized. Schneider Electric encourages customers to upgrade to the new software as soon as possible. The company further encourages customers to ensure any firmware files used to update the device are acquired from trusted sources; to operate the products on properly segmented control networks; to adequately secure any workstation that has been configured to have access to the product; and to follow the remediation and general security recommendations below.</p> https://cve.radiocsirt.org/vuln/sevd-2020-161-05