Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, including information exposures, denial of service, and arbitrary code execution when access control checks are not applied consistently.
CVSS Information
N/A
Vulnerability Type
授权机制缺失
Vulnerability Title
Schneider Electric Easergy T300 安全漏洞
Vulnerability Description
Schneider Electric Easergy T300是法国施耐德电气（Schneider Electric）公司的一款用于电力行业的远程终端单元。 Schneider Electric Easergy T300存在安全漏洞，该漏洞源于设备缺少关键功能的身份验证，缺少授权，缺少敏感数据的加密，渲染的UI层或框架的限制不当，攻击者可利用该漏洞获取敏感信息，拒绝服务和远程执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A