Schneider Electric Modicon M221 Programmable Logic Controller
Successful exploitation of these vulnerabilities could allow an attacker to take control over the PLC and gain unauthorized access, which could result in exposure of sensitive information.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-28214US | medium5.5 | — | ||
A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to pre-compute the hash v… | ||||
| CVE-2020-7568US | medium4.3 | — | ||
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 (all references, all versions) that could allow non sensitive information… | ||||
| CVE-2020-7567US | medium5.7OT elevated | — | ||
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to find the password hash when the… | ||||
| CVE-2020-7566US | high7.3 | — | ||
A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to break the encryption keys when the atta… | ||||
| CVE-2020-7565US | high7.3 | — | ||
A CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to break the encryption key when the att… | ||||
references
External citations — patches, advisories, analysis.
remediations (10)
- MitigationModicon M221
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M221
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M221
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M221
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M221
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
- FixedModicon M221
Within the Modicon M221 application, the user must: Disable all unused protocols, especially programming protocol, as described in section “Configuring Ethernet Network” of EcoStruxure Machine Expert - Basic online help for the M221 PLC. This action will prevent unintended remote programming access.;Set a password to protect the project.;Set a password for read access on the controller.;Set a different password for write access on the controller.
- FixedModicon M221
Within the Modicon M221 application, the user must: Disable all unused protocols, especially programming protocol, as described in section “Configuring Ethernet Network” of EcoStruxure Machine Expert - Basic online help for the M221 PLC. This action will prevent unintended remote programming access.;Set a password to protect the project.;Set a password for read access on the controller.;Set a different password for write access on the controller.
- FixedModicon M221
Within the Modicon M221 application, the user must: Disable all unused protocols, especially programming protocol, as described in section “Configuring Ethernet Network” of EcoStruxure Machine Expert - Basic online help for the M221 PLC. This action will prevent unintended remote programming access.;Set a password to protect the project.;Set a password for read access on the controller.;Set a different password for write access on the controller.
- FixedModicon M221
Within the Modicon M221 application, the user must: Disable all unused protocols, especially programming protocol, as described in section “Configuring Ethernet Network” of EcoStruxure Machine Expert - Basic online help for the M221 PLC. This action will prevent unintended remote programming access.;Set a password to protect the project.;Set a password for read access on the controller.;Set a different password for write access on the controller.
- FixedModicon M221
Within the Modicon M221 application, the user must: Disable all unused protocols, especially programming protocol, as described in section “Configuring Ethernet Network” of EcoStruxure Machine Expert - Basic online help for the M221 PLC. This action will prevent unintended remote programming access.;Set a password to protect the project.;Set a password for read access on the controller.;Set a different password for write access on the controller.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan