Se Ecostruxure Insufficient Verification of Data Authenticity

2021-08-1000:00:00

www.tenable.com

ecostruxure

verification of data

authenticity

file

scanner

EPSS

0.002

Percentile

60.7%

JSON

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.

File data ot_500467.nasl

VendorProductVersionCPE
seecostruxure_machine_expert*cpe:2.3:a:se:ecostruxure_machine_expert:*:*:*:*:*:*:*:*
sesomachine*cpe:2.3:a:se:somachine:*:*:*:*:*:*:*:*
sesomachine_motion*cpe:2.3:a:se:somachine_motion:*:*:*:*:*:*:*:*
semodicon_m218_firmware*cpe:2.3:o:se:modicon_m218_firmware:*:*:*:*:*:*:*:*
semodicon_m241_firmware*cpe:2.3:o:se:modicon_m241_firmware:*:*:*:*:*:*:*:*
semodicon_m251_firmware*cpe:2.3:o:se:modicon_m251_firmware:*:*:*:*:*:*:*:*
semodicon_m258_firmware*cpe:2.3:o:se:modicon_m258_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
se	ecostruxure_machine_expert	*	cpe:2.3:a:se:ecostruxure_machine_expert::::::::
se	somachine	*	cpe:2.3:a:se:somachine::::::::
se	somachine_motion	*	cpe:2.3:a:se:somachine_motion::::::::
se	modicon_m218_firmware	*	cpe:2.3:o:se:modicon_m218_firmware::::::::
se	modicon_m241_firmware	*	cpe:2.3:o:se:modicon_m241_firmware::::::::
se	modicon_m251_firmware	*	cpe:2.3:o:se:modicon_m251_firmware::::::::
se	modicon_m258_firmware	*	cpe:2.3:o:se:modicon_m258_firmware::::::::