CVE-2020-7508: Schneider Electric Easergy t300 Firmware

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to gain full access by brute force.

Affected products

• Schneider Electric Easergy t300 Firmware: up to and including 1.5.2

Published 2020-06-16. Last modified 2026-06-17.