Lucene search
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500313.NASLHistoryNov 08, 2019 - 12:00 a.m.
Schneider-electric Modicon Improper Authentication
2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
10
0.003 Low
EPSS
Percentile
66.3%
A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric’s Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to overwrite the original password with their password. If an attacker exploits this vulnerability and overwrite the password, the attacker can upload the original program from the PLC.
File data ot_500313.nasl| Vendor | Product | Version | CPE |
|---|---|---|---|
| schneider-electric | modicon_m221_firmware | * | cpe:2.3:o:schneider-electric:modicon_m221_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | modicon_m221 | - | cpe:2.3:h:schneider-electric:modicon_m221:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2018-7791
2018-08-29 21:29:01
nessus
nessus
cvelist
cvelist
CVE-2018-7791
2018-08-22 00:00:00
nvd
nvd
CVE-2018-7791
2018-08-29 21:29:01
prion
prion
Design/Logic Flaw
2018-08-29 21:29:00
ics
ics
Schneider Electric Modicon M221
2018-08-28 12:00:00
threatpost
threatpost
High-Severity Flaws Patched in Schneider Electric Products
2018-08-29 17:55:38