Skip to content
OpenAdvisories
High ICSA-20-343-04 5 CVEs

Schneider Electric Modicon M221 Programmable Logic Controller

Published Dec 8, 2020 · Updated Dec 8, 2020

Vendor: Schneider Electric Product: Modicon M221

Summary

Successful exploitation of these vulnerabilities could allow an attacker to take control over the PLC and gain unauthorized access, which could result in exposure of sensitive information.

Vulnerabilities 5

  • Critical 9.8
    CVE-2020-28214

    A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all vers…

  • High 7.1
    CVE-2020-7565

    A CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 (all references, all versions) that coul…

  • High 7.1
    CVE-2020-7566

    A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all versions) that could …

  • High 7.1
    CVE-2020-7567

    A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all references, all versions) tha…

  • Low 3.1
    CVE-2020-7568

    A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 (all referen…

Revision history

  1. #1

    ICSA-20-343-04 Schneider Electric Modicon M221 Programmable Logic Controller

References