CVE-2020-28214

MEDIUM

Modicon M221 Firmware - Use of a One-Way Hash with a Predictable Salt

Title source: llm
STIX 2.1

Description

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictable salt would provide.

References (2)

Core 2
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04

Scores

CVSS v3 5.5
EPSS 0.0006
EPSS Percentile 18.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-760
Status published
Products (1)
schneider-electric/modicon_m221_firmware
Published Dec 11, 2020
Tracked Since Feb 18, 2026