Lucene search

K
nessusThis script is Copyright (C) 2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500459.NASL
HistoryAug 10, 2021 - 12:00 a.m.

Schneider-electric Modicon Unspecified Vulnerability

2021-08-1000:00:00
This script is Copyright (C) 2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
12

0.0005 Low

EPSS

Percentile

17.1%

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictable salt would provide.

File data ot_500459.nasl
VendorProductVersionCPE
schneider-electricmodicon_m221_firmware*cpe:2.3:o:schneider-electric:modicon_m221_firmware:*:*:*:*:*:*:*:*

0.0005 Low

EPSS

Percentile

17.1%

Related for OT_500459.NASL