CVE-2020-7567 - A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to find the password hash when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller and broke the encryption keys

Back Back to CVE browser

HIGH

A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to find the password hash when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller and broke the encryption keys

Published Nov 19, 2020

7.1

HIGH

CVSS 3.1

EPSS 0.21%

Description

A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to find the password hash when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller and broke the encryption keys.

Affected products

Vendor n/a Product Modicon M221, all references, all versions Default
unknown
Affected
- Modicon M221, all references, all versions

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Modicon M221, all references, all versions	unknown	Affected Modicon M221, all references, all versions

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-311

Missing Encryption of Sensitive Data

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28692
Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04
x_refsource_MISCThird Party AdvisoryUS Government Resource
https://www.se.com/ww/en/download/document/SEVD-2020-315-05/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28692		Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04		x_refsource_MISCThird Party AdvisoryUS Government Resource
https://www.se.com/ww/en/download/document/SEVD-2020-315-05/		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner schneider

Published Nov 19, 2020

Updated May 29, 2026

Reserved Jan 21, 2020

Link CVE-2020-7567

CISA Vulnrichment

Updated May 29, 2026

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-7567

Red Hat

No data

ENISA EUVD

Assigner schneider

Published Nov 19, 2020

Updated May 29, 2026

Link EUVD-2020-28692

GitHub

No data