CVE-2020-7488highCWE-319

CVE-2020-7488: high-severity vulnerability in EcoStruxure Machine Expert (all…

Published · Updated

Follow this CVE+ Monitor EcoStruxure Machine ExpertSoMachine, SoMachine MotionModicon M218 Logic ControllerModicon M241 Logic ControllerModicon M251 Logic ControllerModicon M258 Logic Controller

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.9%
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
n/a · EcoStruxure Machine Expert (all versions)SoMachine, SoMachine Motion (all versions)Modicon M218 Logic Controller (all versions)Modicon M241 Logic Controller (all versions)Modicon M251 Logic Controller (all versions)Modicon M258 Logic Controller (all versions)