PT-2024-2039 · Schneider Electric · Schneider Electric Easergy T200

Published

2024-03-12

·

Updated

2024-03-18

·

CVE-2024-2052

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Schneider Electric Easergy T200 (affected versions not specified)
Description A Files or Directories Accessible to External Parties issue exists, potentially allowing unauthenticated files and logs exfiltration and download of files when an attacker modifies the URL to download to a different location. This could enable a remote attacker to gain unauthorized access to protected information.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

BDU:2024-01917
CVE-2024-2052

Affected Products

Schneider Electric Easergy T200