CVE-2020-7566
First published: Thu Nov 19 2020(Updated: )
A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to break the encryption keys when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Modicon M221 Firmware | ||
| Schneider-electric Modicon M221 | ||
| Schneider Electric Modicon M221 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-7566?
CVE-2020-7566 is a vulnerability titled 'A CWE-334: Small Space of Random Values vulnerability' that exists in Modicon M221 firmware.
What is the severity of CVE-2020-7566?
The severity of CVE-2020-7566 is high with a CVSS score of 7.3.
How does CVE-2020-7566 affect Schneider-electric Modicon M221?
CVE-2020-7566 affects Schneider-electric Modicon M221 firmware, allowing the attacker to break encryption keys when capturing traffic between EcoStruxure Machine - Basic software and Modicon M221 controller.
Is Schneider-electric Modicon M221 vulnerable to CVE-2020-7566?
No, Schneider-electric Modicon M221 itself is not vulnerable to CVE-2020-7566.
How can I fix CVE-2020-7566?
To fix CVE-2020-7566, it is recommended to apply the necessary patches or updates provided by Schneider-electric.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/severity
- agent/references
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- agent/trending
- vendor/schneider-electric
- canonical/schneider-electric modicon m221 firmware
- canonical/schneider-electric modicon m221
- vendor/schneider electric
- canonical/schneider electric modicon m221