First published: Thu Nov 19 2020(Updated: )
A CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to break the encryption key when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller.
Credit: cybersecurity@se.com
Affected Software | Affected Version | How to fix |
---|---|---|
Schneider-electric Modicon M221 Firmware | ||
Schneider-electric Modicon M221 | ||
Schneider Electric Modicon M221 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2020-7565.
The severity of CVE-2020-7565 is high with a severity value of 7.3.
Modicon M221 (all references, all versions) is affected by CVE-2020-7565.
CVE-2020-7565 allows the attacker to break the encryption key when they have captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller.
To fix CVE-2020-7565, update to the latest version of Modicon M221 firmware as provided by Schneider-electric.