CVE-2020-7488
First published: Wed Apr 22 2020(Updated: )
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Ecostruxure Machine Expert | ||
| Schneider-electric Somachine | ||
| Schneider-electric Somachine Motion | ||
| Schneider-electric Modicon M218 Firmware | ||
| Schneider-electric Modicon M218 | ||
| Schneider-electric Modicon M241 Firmware | ||
| Schneider-electric Modicon M241 | ||
| Schneider-electric Modicon M251 Firmware | ||
| Schneider-electric Modicon M251 | ||
| Schneider-electric Modicon M258 Firmware | ||
| Schneider-electric Modicon M258 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2020-7488.
What is the severity level of CVE-2020-7488?
CVE-2020-7488 has a severity level of 7.5 (High).
Which software products are affected by CVE-2020-7488?
The vulnerability affects Schneider-electric Ecostruxure Machine Expert, Schneider-electric Somachine, and Schneider-electric Somachine Motion.
How can CVE-2020-7488 be exploited?
CVE-2020-7488 can be exploited by an attacker intercepting and reading sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.
How can I fix CVE-2020-7488?
To fix CVE-2020-7488, it is recommended to apply the necessary patches and updates provided by Schneider-Electric. Additionally, users should ensure that sensitive information is transmitted securely.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/description
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/schneider-electric
- canonical/schneider-electric ecostruxure machine expert
- canonical/schneider-electric somachine
- canonical/schneider-electric somachine motion
- canonical/schneider-electric modicon m218 firmware
- canonical/schneider-electric modicon m218
- canonical/schneider-electric modicon m241 firmware
- canonical/schneider-electric modicon m241
- canonical/schneider-electric modicon m251 firmware
- canonical/schneider-electric modicon m251
- canonical/schneider-electric modicon m258 firmware
- canonical/schneider-electric modicon m258