CVE-2020-7568 PUBLISHED CVSS 4.300000190734863 MEDIUM

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 (all references, all versions) that could allow non sensitive information disclosure when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller.

EPSS 0.06% · 17.7th percentile

Risk Scores

CVSS v3.1
4.300000190734863
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.06%
17.7th percentile

Affected Products

VendorProductVersions
n/aModicon M221, all references, all versionsModicon M221, all references, all versions
schneider-electricmodicon_m221_firmware

Timeline

References

Open in Interactive Console →