Schneider ELectric Easergy T200 (DNP3) Models: T200I, T200E, T200P, T200S, T200H

• CVE-2024-2052 High 7.5 CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow unauthenticated files and logs exfiltration and download of files when an attacker modifies the URL 0.5%
• CVE-2024-2050 High 8.2 CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an attacker injects then executes arbitrary malicious JavaScript code within the 0.5%
• CVE-2024-2051 Critical 9.8 CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover and unauthorized access to the system when an attacker conducts brute-force a 0.8%