Schneider Electric Modicon M221 PLCs and SoMachine Basic (Update A)
ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-7575US | critical9.8 | — | ||
Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 requ… | ||||
| CVE-2017-7574US | critical9.8OT elevated | — | ||
Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to p… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationModicon M221 PLC
Schneider Electric recommends that users store project files in secure, access-restricted locations and encrypt project files with reputable third party file encryption tools.
- MitigationModicon M221 PLC
Schneider Electric recommends that users store project files in secure, access-restricted locations and encrypt project files with reputable third party file encryption tools.
- MitigationSoMachine Basic
Schneider Electric recommends that users store project files in secure, access-restricted locations and encrypt project files with reputable third party file encryption tools.
- MitigationSoMachine Basic
Schneider Electric recommends that users store project files in secure, access-restricted locations and encrypt project files with reputable third party file encryption tools.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan