CoreCVE
Back

CRITICAL

A CWE-798: Use of Hard-coded Credentials vulnerability exists in the Unity Loader and OS Loader Software (all versions)

Published Jun 16, 2020

Description

A CWE-798: Use of Hard-coded Credentials vulnerability exists in the Unity Loader and OS Loader Software (all versions). The fixed credentials are used to simplify file transfer. Today the use of fixed credentials is considered a vulnerability, which could cause unauthorized access to the file transfer service provided by the Modicon PLCs. This could result in various unintended results.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner schneider
Published Jun 16, 2020
Updated Aug 4, 2024
Reserved Jan 21, 2020
Link CVE-2020-7498

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2020-7498

Red Hat

No data

ENISA EUVD

Assigner schneider
Published Jun 16, 2020
Updated Aug 4, 2024
Link EUVD-2020-28623

GitHub

No data