{"id":"CVE-2020-7506","aliases":["EUVD-2020-28631","GHSA-3hmg-5j42-p3q3"],"status":"published","title":"A CWE-538: File and Directory Information Exposure vulnerability exists in Easergy T300 (Firmware...","description":"A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01343,"percentile":0.71599,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2020-06-16T19:43:23Z","modified":"2026-06-17T03:24:54Z","products":[{"vendor":"schneider-electric","product":"easergy_t300_firmware"}],"references":[{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2020-161-04","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7506"},{"url":"https://www.se.com/ww/en/download/document/SEVD-2020-161-04"},{"url":"https://github.com/advisories/GHSA-3hmg-5j42-p3q3"}],"sources":{"cve":[{"id":"CVE-2020-7506","description":"A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.","status":"published","published":"2020-06-16T19:43:23Z","modified":"2024-08-04T09:33:19.664Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:35:58.787905Z"}],"euvd":[{"id":"EUVD-2020-28631","description":"A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.","status":"published","published":"2020-06-16T19:43:23Z","modified":"2024-08-04T09:33:19Z","updated_at":"2026-11-03T03:07:59.603443Z"}],"ghsa":[{"id":"GHSA-3hmg-5j42-p3q3","title":"A CWE-538: File and Directory Information Exposure vulnerability exists in Easergy T300 (Firmware...","description":"A CWE-538: File and Directory Information Exposure vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.","status":"published","published":"2022-05-24T17:20:39Z","modified":"2023-01-29T05:03:02Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:45:13.764942Z"}],"nvd":[{"id":"CVE-2020-7506","description":"A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure.","status":"published","published":"2020-06-16T20:15:15.38Z","modified":"2026-06-17T03:24:54.68Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:06:07.249892Z"}]}}