Lucene search
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500080.NASLHistoryNov 08, 2019 - 12:00 a.m.
Schneider-electric Modicon Authentication Bypass by Capture-replay
2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
14
0.002 Low
EPSS
Percentile
60.2%
An Information Management Error vulnerability exists in Schneider Electric’s Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a Modicon M221, the attacker can upload the original program from the PLC.
File data ot_500080.nasl| Vendor | Product | Version | CPE |
|---|---|---|---|
| schneider-electric | modicon_m221_firmware | * | cpe:2.3:o:schneider-electric:modicon_m221_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | modicon_m221 | - | cpe:2.3:h:schneider-electric:modicon_m221:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2018-7790
2018-08-22 00:00:00
cve
cve
CVE-2018-7790
2018-08-29 21:29:01
prion
prion
Design/Logic Flaw
2018-08-29 21:29:00
nvd
nvd
CVE-2018-7790
2018-08-29 21:29:01
nessus
nessus
ics
ics
Schneider Electric Modicon M221
2018-08-28 12:00:00
threatpost
threatpost
High-Severity Flaws Patched in Schneider Electric Products
2018-08-29 17:55:38