CVE-2020-28214

2020-12-1100:51:01

CWE-760

schneider

www.cve.org

5.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictable salt would provide.

CNA Affected

[
  {
    "product": "Modicon M221 (all references, all versions)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Modicon M221 (all references, all versions)"
      }
    ]
  }
]