CVE-2017-7575: Infoleak
First published: Thu Apr 06 2017(Updated: )
Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus port (502/tcp). Subsequently the application may be arbitrarily downloaded, modified, and uploaded.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Modicon Tm221ce16r Firmware | =1.3.3.3 | |
| Schneider-electric Modicon Tm221ce16r |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- vendor/schneider-electric
- canonical/schneider-electric modicon tm221ce16r firmware
- version/schneider-electric modicon tm221ce16r firmware/1.3.3.3
- canonical/schneider-electric modicon tm221ce16r