CVE-2020-7487CWE-345

CVE-2020-7487: vulnerability in EcoStruxure Machine Expert (all…

Published · Updated

Follow this CVE+ Monitor EcoStruxure Machine ExpertSoMachine, SoMachine MotionModicon M218 Logic ControllerModicon M241 Logic ControllerModicon M251 Logic ControllerModicon M258 Logic Controller

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.
Affected products
n/a · EcoStruxure Machine Expert (all versions)SoMachine, SoMachine Motion (all versions)Modicon M218 Logic Controller (all versions)Modicon M241 Logic Controller (all versions)Modicon M251 Logic Controller (all versions)Modicon M258 Logic Controller (all versions)