Skip to content
OpenAdvisories
Critical SEVD-2021-130-01 1 CVE

Modicon Managed Switch

Published May 11, 2021 · Updated May 11, 2021

Summary

Schneider Electric is aware of a vulnerability in its Modicon Managed Switch products.
The Modicon Managed Switch products are designed for the special requirements of industrial
automation. The devices allow users to set up switched Industrial Ethernet networks.
Failure to apply the firmware upgrade or mitigations provided below may allow an attacker to
change the password of any user, which could cause all or part of the switch to be controlled by
the attacker. That could result in various attack types like denial of service or provide access to
unauthorized devices on the network.

Vulnerabilities 1

  • Unscored —

    Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM* and MCSE…

Revision history

  1. #1.0.0

    Original Release

References