SEVD-2024-072-01 Easergy T200 Security Notification

Schneider Electric is aware of multiple vulnerabilities in its Easergy T200 products. The following CVEs have been assigned: CVE-2024-2050, CVE-2024-2051, CVE-2024-2052. Description of the vulnerabilities as follows: CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’), and CWE-307: Improper Restriction of Excessive Authentication Attempts CWE-552: Files or Directories Accessible to External Parties