Lucene search
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500161.NASLHistoryNov 08, 2019 - 12:00 a.m.
Schneider-electric Modicon Missing Authorization
2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
11
0.001 Low
EPSS
Percentile
43.0%
A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric’s Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to decode the password using rainbow table.
File data ot_500161.nasl| Vendor | Product | Version | CPE |
|---|---|---|---|
| schneider-electric | modicon_m221_firmware | * | cpe:2.3:o:schneider-electric:modicon_m221_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | modicon_m221 | - | cpe:2.3:h:schneider-electric:modicon_m221:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2018-7792
2018-08-29 21:29:01
nessus
nessus
prion
prion
Design/Logic Flaw
2018-08-29 21:29:00
cvelist
cvelist
CVE-2018-7792
2018-08-22 00:00:00
nvd
nvd
CVE-2018-7792
2018-08-29 21:29:01
ics
ics
Schneider Electric Modicon M221
2018-08-28 12:00:00
threatpost
threatpost
High-Severity Flaws Patched in Schneider Electric Products
2018-08-29 17:55:38