PT-2019-5398 · Schneider Electric · Easergy Builder

Published 2019-08-21 · Updated 2020-07-27 · CVE-2020-7514

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Easergy Builder versions 1.4.7.2 and older

Description The issue is related to the use of an insufficiently secure encryption algorithm, which could allow an attacker to gain access to user credentials and subsequently achieve full access to the device.

Recommendations For Easergy Builder versions 1.4.7.2 and older, update to a version that uses a secure encryption algorithm to prevent exploitation. As a temporary workaround, consider restricting access to the device to minimize the risk of unauthorized access until a secure version is available.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

BDU:2020-02731

CVE-2020-7514

Affected Products

Easergy Builder

References · 5

• https://osv.dev/vulnerability/CVE-2020-7514 · Vendor Advisory
• https://se.com/ww/en/download/document/SEVD-2020-161-05 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7514 · Security Note
• https://bdu.fstec.ru/vul/2020-02731 · Security Note
• https://se.com/us/en/download/document/SEVD-2020-161-05 · Note