CVE-2020-7548
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and...
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) that could allow unauthorized users to login.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) that could allow unauthorized users to login.
- Record
CVE-2020-7548- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-330
- Updated
- 2026-11-02
CVE List No score
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) that could allow unauthorized users to login.
- Record
CVE-2020-7548- Weakness
- CWE-330
- Updated
- 2026-11-02
EUVDEUVD-2020-28673 No score
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) that could allow unauthorized users to login.
- Record
EUVD-2020-28673- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hg3w-24rp-mf42 No score
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and...
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) that could allow unauthorized users to login.
- Record
GHSA-hg3w-24rp-mf42- Weakness
- CWE-330
- Updated
- 2026-11-02
Affected products
- schneider-electric acti9 powertag link firmware
- schneider-electric acti9 powertag link hd firmware
- schneider-electric acti9 smartlink el b firmware
- schneider-electric acti9 smartlink si b firmware
- schneider-electric acti9 smartlink si d firmware
- schneider-electric wiser energy firmware
- schneider-electric wiser link firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-7548 is a critical vulnerability (CVSS 9.8) in Schneider-electric Acti9 Powertag Link Firmware, published December 1, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 74th percentile. No source names a fixed version.