CVE-2020-7548

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) that could allow unauthorized users to login.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:schneider-electric:acti9_smartlink_si_d_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:acti9_smartlink_si_d:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:schneider-electric:acti9_smartlink_si_b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:acti9_smartlink_si_b:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:schneider-electric:acti9_powertag_link_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:acti9_powertag_link:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:schneider-electric:acti9_powertag_link_hd_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:acti9_powertag_link_hd:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:schneider-electric:acti9_smartlink_el_b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:acti9_smartlink_el_b:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:schneider-electric:wiser_link_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:wiser_link:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:schneider-electric:wiser_energy_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:wiser_energy:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:37

Type Values Removed Values Added
References () https://www.se.com/ww/en/download/document/SEVD-2020-287-03/ - Patch, Vendor Advisory () https://www.se.com/ww/en/download/document/SEVD-2020-287-03/ - Patch, Vendor Advisory

Information

Published : 2020-12-01 15:15

Updated : 2024-11-21 05:37


NVD link : CVE-2020-7548

Mitre link : CVE-2020-7548

CVE.ORG link : CVE-2020-7548


JSON object : View

Products Affected

schneider-electric

  • acti9_powertag_link_hd_firmware
  • acti9_smartlink_si_b
  • acti9_powertag_link_firmware
  • acti9_smartlink_si_d
  • wiser_energy
  • wiser_link_firmware
  • acti9_smartlink_si_b_firmware
  • acti9_powertag_link_hd
  • acti9_smartlink_el_b
  • acti9_smartlink_el_b_firmware
  • acti9_powertag_link
  • wiser_energy_firmware
  • acti9_smartlink_si_d_firmware
  • wiser_link
CWE
CWE-330

Use of Insufficiently Random Values