CVE-2020-7487CWE-345

CVE-2020-7487: fallo en EcoStruxure Machine Expert (all…

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear EcoStruxure Machine ExpertSoMachine, SoMachine MotionModicon M218 Logic ControllerModicon M241 Logic ControllerModicon M251 Logic ControllerModicon M258 Logic Controller

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 0.7%
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.
Productos afectados
n/a · EcoStruxure Machine Expert (all versions)SoMachine, SoMachine Motion (all versions)Modicon M218 Logic Controller (all versions)Modicon M241 Logic Controller (all versions)Modicon M251 Logic Controller (all versions)Modicon M258 Logic Controller (all versions)