Modicon M221 Firmware (Schneider-electric) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2020-12-11. Vendor: Schneider-electric.
CVEs of Modicon M221 Firmware
- CVE-2020-28214 - CVSS 9.8 (critical), 2020-12-11: A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to…
- CVE-2020-7567 - CVSS 7.1 (high), 2020-11-19: A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to find the…
- CVE-2020-7566 - CVSS 7.3 (high), 2020-11-19: A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to break the…
- CVE-2020-7568 - CVSS 4.3 (medium), 2020-11-19: A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 (all references, all versions) that could allow non…
- CVE-2020-7565 - CVSS 7.3 (high), 2020-11-19: A CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to break the…
- CVE-2020-7489 - CVSS 9.8 (critical), 2020-04-22: A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine…
- CVE-2019-6820 - CVSS 8.2 (high), 2019-05-22: A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network…
- CVE-2018-7821 - CVSS 7.5 (high), 2019-05-22: An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which…
- CVE-2018-7823 - CVSS 5.3 (medium), 2019-05-22: A Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which…
- CVE-2018-7822 - CVSS 5.5 (medium), 2019-05-22: An Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to…
- CVE-2019-10953 - CVSS 7.5 (high), 2019-04-17: ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are…
- CVE-2018-7791 - CVSS 9.8 (critical), 2018-08-29: A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to…
- CVE-2018-7790 - CVSS 9.8 (critical), 2018-08-29: An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0).…
- CVE-2018-7792 - CVSS 7.5 (high), 2018-08-29: A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to…
- CVE-2018-7789 - CVSS 7.5 (high), 2018-08-29: An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior…
- CVE-2017-6030 - CVSS 6.5 (medium), 2017-06-30: A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version…
