Lucene search
K

9 matches found

NVD
NVD
added 2020/11/19 10:15 p.m.11 views

CVE-2020-7566

A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 all references, all versions that could allow the attacker to break the encryption keys when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller...

7.3CVSS7AI score0.00046EPSS
Exploits0References2
Prion
Prion
added 2020/11/19 10:15 p.m.17 views

Design/Logic Flaw

A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 all references, all versions that could allow the attacker to break the encryption keys when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller...

4.3CVSS7AI score0.00046EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2020/11/19 9:10 p.m.2 views

CVE-2020-7568

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 all references, all versions that could allow non sensitive information disclosure when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221...

5.8AI score0.00057EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2020/11/19 9:10 p.m.2 views

CVE-2020-7566

A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 all references, all versions that could allow the attacker to break the encryption keys when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller...

7.1AI score0.00046EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2020/11/19 9:10 p.m.2 views

CVE-2020-7565

A CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 all references, all versions that could allow the attacker to break the encryption key when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller...

7.1AI score0.00022EPSS
Exploits0References2
CVE
CVE
added 2020/11/19 9:10 p.m.71 views

CVE-2020-7565

CVE-2020-7565 affects Schneider Electric Modicon M221 PLCs (all versions) and is about Inadequate Encryption Strength (CWE-326). The root cause is weakness in cryptographic protection that could allow an attacker to break the encryption key when intercepting traffic between EcoStruxure Machine - ...

7.3CVSS7AI score0.00022EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/11/19 9:10 p.m.15 views

CVE-2020-7565

A CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 all references, all versions that could allow the attacker to break the encryption key when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller...

7.1AI score0.00022EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/11/19 12:0 a.m.4 views

Schneider Electric Modicon M221 Information Disclosure Vulnerability

The Schneider Electric Modicon M221 is a programmable logic controller from Schneider Electric, France. The Modicon M221 suffers from an information disclosure vulnerability that originates from the presence of a sensitive information exposure to an unauthorized Actor vulnerability that can be...

4.3CVSS5.8AI score0.00057EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2020/11/10 12:0 a.m.3 views

PT-2020-6348

Name of the Vulnerable Software and Affected Versions Modicon M221 all versions Modicon M100 affected versions not specified Modicon M200 affected versions not specified Description A CWE-326: Inadequate Encryption Strength issue exists that could allow an attacker to break the encryption key whe...

7.8CVSS7.1AI score0.00022EPSS
Exploits0References11
Rows per page
Query Builder