Description (CNA)
A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of problems, including information exposure, denial of service, and command execution when access to a resource from an attacker is not restricted or incorrectly restricted.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Easergy T300 with firmware 2.7 and older | affected Easergy T300 with firmware 2.7 and older |
CWE
CWE-284
References
- https://www.se.com/ww/en/download/document/SEVD-2020-315-06/
- https://us-cert.cisa.gov/ics/advisories/icsa-20-343-03
ADP enrichment
No English description supplied.