Lucene search
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500282.NASLHistoryNov 08, 2019 - 12:00 a.m.
Schneider-electric Modicon Exposure of Sensitive Information to an Unauthorized Actor
2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
10
0.114 Low
EPSS
Percentile
95.2%
Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus port (502/tcp). Subsequently the application may be arbitrarily downloaded, modified, and uploaded.
File data ot_500282.nasl| Vendor | Product | Version | CPE |
|---|---|---|---|
| schneider-electric | modicon_tm221ce16r_firmware | 1.3.3.3 | cpe:2.3:o:schneider-electric:modicon_tm221ce16r_firmware:1.3.3.3:*:*:*:*:*:*:* |
| schneider-electric | modicon_tm221ce16r | - | cpe:2.3:h:schneider-electric:modicon_tm221ce16r:-:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2017-04-06 21:59:00
cve
cve
CVE-2017-7575
2017-04-06 21:59:00
nessus
nessus
cvelist
cvelist
CVE-2017-7575
2017-04-06 21:00:00
nvd
nvd
CVE-2017-7575
2017-04-06 21:59:00
ics
ics
Schneider Electric Modicon M221 PLCs and SoMachine Basic (Update A)
2017-07-20 12:00:00
Schneider Electric Modicon M221 PLCs and SoMachine Basic
2017-04-13 00:00:00