PT-2020-6345 · Unknown+2 · Wiser Series Gateways+2

Published 2020-10-13 · Updated 2020-12-08 · CVE-2020-7548

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Smartlink, PowerTag, and Wiser Series Gateways (affected versions not specified)

Description A vulnerability exists in the communication interface for modular equipment that is related to the use of insufficiently random values. This could allow unauthorized users to login. The exploitation of this vulnerability may allow a remote attacker to gain access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

BDU:2021-04258

CVE-2020-7548

Affected Products

Powertag

Smartlink

Wiser Series Gateways

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2020-7548 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7548 · Vendor Advisory
• https://se.com/ww/en/download/document/SEVD-2020-287-03 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04258 · Security Note
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2020-287-03_Smartlink_PowerTag_and_Wiser_Series_Gateways_Security_Notification.pdf&p_Doc_Ref=SEVD-2020-287-03 · Note
• https://t.me/cvenotify/6741 · Telegram Post
• https://t.me/cvenotify/6380 · Telegram Post
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2020-287-03_Smartlink_PowerTag_and_Wiser_Series_Gateways_Security_Notification.pdf&p_Doc_Ref=SEVD-2020-287-03 · Note
• https://t.me/cibsecurity/16982 · Telegram Post