CVE-2020-7515: Schneider Electric Easergy Builder

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A CWE-321: Use of hard-coded cryptographic key stored in cleartext vulnerability exists in Easergy Builder V1.4.7.2 and prior which could allow an attacker to decrypt a password.

Affected products

• Schneider Electric Easergy Builder: up to and including 1.4.7.2

Published 2020-07-23. Last modified 2026-06-17.