CVE-2020-7506: Schneider Electric Easergy t300 Firmware

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.

Affected products

• Schneider Electric Easergy t300 Firmware: up to and including 1.5.2

Published 2020-06-16. Last modified 2026-06-17.