CVE-2020-7568 - A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 (all references, all versions) that could allow non sensitive information disclosure when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller

Back Back to CVE browser

MEDIUM

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 (all references, all versions) that could allow non sensitive information disclosure when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller

Published Nov 19, 2020

4.3

MEDIUM

CVSS 3.1

EPSS 0.53%

Description

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 (all references, all versions) that could allow non sensitive information disclosure when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller.

Affected products

Vendor n/a Product Modicon M221, all references, all versions Default
n/a
- Version
  Modicon M221, all references, all versions
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Modicon M221, all references, all versions

n/a

Version	Status	Constraints
Modicon M221, all references, all versions	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28693
Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04
x_refsource_MISCThird Party AdvisoryUS Government Resource
https://www.se.com/ww/en/download/document/SEVD-2020-315-05/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28693		Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04		x_refsource_MISCThird Party AdvisoryUS Government Resource
https://www.se.com/ww/en/download/document/SEVD-2020-315-05/		x_refsource_MISCVendor Advisory