Critical severity9.8NVD Advisory· Published Dec 1, 2020· Updated Jun 17, 2026
CVE-2020-7548
CVE-2020-7548
Description
A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways (see security notification for version information) that could allow unauthorized users to login.
Affected products
10- cpe:2.3:o:schneider-electric:acti9_powertag_link_firmware:*:*:*:*:*:*:*:*Range: <001.008.007
- cpe:2.3:o:schneider-electric:acti9_powertag_link_hd_firmware:*:*:*:*:*:*:*:*Range: <001.008.007
- cpe:2.3:o:schneider-electric:acti9_smartlink_el_b_firmware:*:*:*:*:*:*:*:*Range: <1.2.1
- cpe:2.3:o:schneider-electric:acti9_smartlink_si_b_firmware:*:*:*:*:*:*:*:*Range: <002.004.002
- cpe:2.3:o:schneider-electric:acti9_smartlink_si_d_firmware:*:*:*:*:*:*:*:*Range: <002.004.002
- cpe:2.3:o:schneider-electric:wiser_energy_firmware:*:*:*:*:*:*:*:*Range: <1.5.0
- cpe:2.3:o:schneider-electric:wiser_link_firmware:*:*:*:*:*:*:*:*Range: <1.5.0
Patches
Vulnerability mechanics
References
1- www.se.com/ww/en/download/document/SEVD-2020-287-03/nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.