CVE-2017-7575

CRITICAL

Schneider Electric Modicon TM221CE16R 1.3.3.3 - Info Disclosure

Title source: llm
STIX 2.1

Description

Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus port (502/tcp). Subsequently the application may be arbitrarily downloaded, modified, and uploaded.

References (3)

Core 3
Core References
Exploit, Third Party Advisory x_refsource_misc
https://os-s.net/advisories/OSS-2017-01.pdf
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/97523

Scores

CVSS v3 9.8
EPSS 0.0128
EPSS Percentile 79.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-200
Status published
Products (1)
schneider-electric/modicon_tm221ce16r_firmware 1.3.3.3
Published Apr 06, 2017
Tracked Since Feb 18, 2026