Vulnerabilities > Schneider Electric > Easergy Builder > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-07-23 CVE-2020-7519 Weak Password Requirements vulnerability in Schneider-Electric Easergy Builder 1.4.7.2
A CWE-521: Weak Password Requirements vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to compromise a user account.
network
low complexity
schneider-electric CWE-521
5.0
2020-07-23 CVE-2020-7518 Improper Input Validation vulnerability in Schneider-Electric Easergy Builder 1.4.7.2
A CWE-20: Improper input validation vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to modify project configuration files.
network
low complexity
schneider-electric CWE-20
5.0
2020-07-23 CVE-2020-7514 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Schneider-Electric Easergy Builder 1.4.7.2
A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker access to the authorization credentials for a device and gain full access.
local
low complexity
schneider-electric CWE-327
4.6