Skip to content
OpenAdvisories
Critical ICSA-17-103-02A 2 CVEs

Schneider Electric Modicon M221 PLCs and SoMachine Basic (Update A)

Published Apr 13, 2017 · Updated Jul 20, 2017 · Revision 2

Vendor: Schneider Electric Product: Modicon M221 PLC Product: SoMachine Basic

Summary

ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.

Vulnerabilities 2

  • Critical 10.0
    CVE-2017-7574

    Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-k…

  • Critical 9.8
    CVE-2017-7575

    Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection pas…

Revision history

  1. #2

    ICSA-17-103-02A Schneider Electric Modicon M221 PLCs and SoMachine Basic (Update A)

  2. #1

    ICSA-17-103-02 Schneider Electric Modicon M221 PLCs and SoMachine Basic

References