Schneider Electric Modicon M221 Programmable Logic Controller
Successful exploitation of these vulnerabilities could allow an attacker to take control over the PLC and gain unauthorized access, which could result in exposure of sensitive information.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-28214US | medium5.5 | — | ||
A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to pre-compute the hash v… | ||||
| CVE-2020-7568US | medium4.3 | — | ||
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 (all references, all versions) that could allow non sensitive information… | ||||
| CVE-2020-7567US | medium5.7OT erhöht | — | ||
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to find the password hash when the… | ||||
| CVE-2020-7566US | high7.3 | — | ||
A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to break the encryption keys when the atta… | ||||
| CVE-2020-7565US | high7.3 | — | ||
A CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to break the encryption key when the att… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (10)
- MitigationModicon M221
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M221
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M221
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M221
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M221
Install physical controls so no unauthorized personnel can access industrial control and safety systems, components, peripheral equipment, and networks.
- BehobenModicon M221
Within the Modicon M221 application, the user must: Disable all unused protocols, especially programming protocol, as described in section “Configuring Ethernet Network” of EcoStruxure Machine Expert - Basic online help for the M221 PLC. This action will prevent unintended remote programming access.;Set a password to protect the project.;Set a password for read access on the controller.;Set a different password for write access on the controller.
- BehobenModicon M221
Within the Modicon M221 application, the user must: Disable all unused protocols, especially programming protocol, as described in section “Configuring Ethernet Network” of EcoStruxure Machine Expert - Basic online help for the M221 PLC. This action will prevent unintended remote programming access.;Set a password to protect the project.;Set a password for read access on the controller.;Set a different password for write access on the controller.
- BehobenModicon M221
Within the Modicon M221 application, the user must: Disable all unused protocols, especially programming protocol, as described in section “Configuring Ethernet Network” of EcoStruxure Machine Expert - Basic online help for the M221 PLC. This action will prevent unintended remote programming access.;Set a password to protect the project.;Set a password for read access on the controller.;Set a different password for write access on the controller.
- BehobenModicon M221
Within the Modicon M221 application, the user must: Disable all unused protocols, especially programming protocol, as described in section “Configuring Ethernet Network” of EcoStruxure Machine Expert - Basic online help for the M221 PLC. This action will prevent unintended remote programming access.;Set a password to protect the project.;Set a password for read access on the controller.;Set a different password for write access on the controller.
- BehobenModicon M221
Within the Modicon M221 application, the user must: Disable all unused protocols, especially programming protocol, as described in section “Configuring Ethernet Network” of EcoStruxure Machine Expert - Basic online help for the M221 PLC. This action will prevent unintended remote programming access.;Set a password to protect the project.;Set a password for read access on the controller.;Set a different password for write access on the controller.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan