CVE-2020-7488

HIGH

EcoStruxure Machine Expert - Cleartext Transmission of Sensitive Information

Title source: llm
STIX 2.1

Description

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0085
EPSS Percentile 53.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-319
Status published
Products (8)
None/EcoStruxure Machine Expert (all versions)SoMachine, SoMachine Motion (all versions)Modicon M218 Logic Controller (all versions)Modicon M241 Logic Controller (all versions)Modicon M251 Logic Controller EcoStruxure Machine Expert (all versions)SoMachine, SoMachine Motion (all versions)Modicon M218 Logi
schneider-electric/ecostruxure_machine_expert
schneider-electric/modicon_m218_firmware
schneider-electric/modicon_m241_firmware
schneider-electric/modicon_m251_firmware
schneider-electric/modicon_m258_firmware
schneider-electric/somachine
schneider-electric/somachine_motion
Published Apr 22, 2020
Tracked Since Feb 18, 2026