Insufficient Entropy vulnerability on Multiple Products
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: total
Summary
CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: total
- Record last updated
Affected versions
- Schneider Electric Easergy MiCOM C264
Versions D6.x
- Schneider Electric Easergy C5
Version range not reported
- Schneider Electric Easergy MiCOM P30
P139 version prior to P139.678.700, P437 version prior to P437.678.700, P439 version prior to P439.678.700, P532 version prior to P532.678.700, P539 version prior to P539.678.700, P631 version prior to P631.678.700, P632 version prior to P632.678.700, P633 version prior to P633.678.700, P634 version prior to P634.678.700, P633 version P633.680.700 only, P634 version P634.680.700 only, P138 version prior to P138.677.700, P436 version prior to P436.677.701, P438 version prior to P438.677.701, P638 version prior to P638.677.700, C434 version prior to C434.679.700
- Schneider Electric Easergy MiCOM P40
Version range not reported
- Schneider Electric EcoStruxure™ Power Automation System Gateway (EPAS-GTW)
Version range not reported
- Schneider Electric EcoStruxure™ Power Automation System User Interface (EPAS-UI)
Version range not reported
- Schneider Electric EcoStruxure™ Power Operation
Version range not reported
- Schneider Electric iPMFLS
Version range not reported
- Schneider Electric PowerLogic™ P5 Protection Relay
Version range not reported
- Schneider Electric PowerLogic™ P7 Protection and Control Platform
Version range not reported
- Schneider Electric PowerLogic™ T300
Version range not reported
- Schneider Electric PowerLogic™ T500
Version range not reported
- Schneider Electric Saitel DP
Version range not reported
- Schneider Electric EasyLogic T150 (formerly Saitel DR)
Version range not reported