CVE-2024-2052

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow unauthenticated files and logs exfiltration and download of files when an attacker modifies the URL to download to a different location.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-552

Affected software

Vendor	Product	Versions
Schneider Electric	Easergy T200 (Modbus) Models: T200I, T200E, T200P, T200S, T200H	>= SC2-04MOD-07000104, <= prior
Schneider Electric	Easergy T200 (IEC104) Models: T200I, T200E, T200P, T200S, T200H	>= SC2-04IEC-07000104, <= prior
Schneider Electric	Easergy T200 (DNP3) Models: T200I, T200E, T200P, T200S, T200H	>= SC2-04DNP-07000104, <= prior
schneider-electric	t200i	< sc2-04mod-07000104

References

Timeline

Published: Mar 18, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-205209.1A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authent CVE-2024-205219.1A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authent CVE-2024-205226.8A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authent CVE-2024-205236.8A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authent CVE-2024-205246.8A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authent CVE-2024-205256.1A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to conduct an XSS attack CVE-2024-205265.3A vulnerability in the SSH server of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cau CVE-2024-205275.5A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected devi CVE-2024-205287.2A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to upload files to arbitrary locations on the underlyi CVE-2024-205295.5A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected devi CVE-2024-20537.5The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently en CVE-2024-205306.1A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to conduct an XSS attack