A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NSchneider Electric Ecostruxure Machine Expert
APPSchneider-Electricall versionsSchneider Electric Modicon M218
HWSchneider-Electricall versionsSchneider Electric Modicon M218 Firmware
OSSchneider-Electricall versionsSchneider Electric Modicon M241
HWSchneider-Electricall versionsSchneider Electric Modicon M241 Firmware
OSSchneider-Electricall versionsSchneider Electric Modicon M251
HWSchneider-Electricall versionsSchneider Electric Modicon M251 Firmware
OSSchneider-Electricall versionsSchneider Electric Modicon M258
HWSchneider-Electricall versionsSchneider Electric Modicon M258 Firmware
OSSchneider-Electricall versionsSchneider Electric Somachine
APPSchneider-Electricall versionsSchneider Electric Somachine Motion
APPSchneider-Electricall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2021-22704CRITICAL9.1PL ✓same product
Path Traversal w produktach Schneider Electric Harmony HMI via FTP
CVE-2020-7487CRITICAL9.8PL ✓same product
Niewystarczająca weryfikacja autentyczności danych w sterownikach Schneider Electric Modicon
CVE-2020-7489CRITICAL9.8PL ✓same product
Podatność Injection w oprogramowaniu Schneider Electric – podstawianie DLL
CVE-2017-6026CRITICAL9.1PL ✓same product
Słabe generowanie numerów sesji w Schneider Electric Modicon M241/M251
CVE-2017-6028CRITICAL9.8PL ✓same product
Słabo chronione dane uwierzytelniające w Schneider Electric Modicon M241/M251