CVE-2020-7568

MEDIUM

Modicon M221 Firmware - Exposure of Sensitive Information via Traffic Capture

Title source: llm
STIX 2.1

Description

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 (all references, all versions) that could allow non sensitive information disclosure when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller.

References (2)

Core 2
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04

Scores

CVSS v3 4.3
EPSS 0.0006
EPSS Percentile 17.7%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
schneider-electric/modicon_m221_firmware
Published Nov 19, 2020
Tracked Since Feb 18, 2026