CVE-2020-7548: Schneider Electric ACTI9 Powertag Link Firmware

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) that could allow unauthorized users to login.

Affected products

• Schneider Electric ACTI9 Powertag Link Firmware: before 001.008.007 (fixed in 001.008.007)
• Schneider Electric ACTI9 Powertag Link Hd Firmware: before 001.008.007 (fixed in 001.008.007)
• Schneider Electric ACTI9 Smartlink El B Firmware: before 1.2.1 (fixed in 1.2.1)
• Schneider Electric ACTI9 Smartlink Si B Firmware: before 002.004.002 (fixed in 002.004.002)
• Schneider Electric ACTI9 Smartlink Si D Firmware: before 002.004.002 (fixed in 002.004.002)
• Schneider Electric Wiser Energy Firmware: before 1.5.0 (fixed in 1.5.0)
• Schneider Electric Wiser Link Firmware: before 1.5.0 (fixed in 1.5.0)

Published 2020-12-01. Last modified 2026-06-17.