CVE-2020-7488highCWE-319

CVE-2020-7488: fallo de gravedad alta en EcoStruxure Machine Expert (all…

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear EcoStruxure Machine ExpertSoMachine, SoMachine MotionModicon M218 Logic ControllerModicon M241 Logic ControllerModicon M251 Logic ControllerModicon M258 Logic Controller

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.5epss 0.9%
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Productos afectados
n/a · EcoStruxure Machine Expert (all versions)SoMachine, SoMachine Motion (all versions)Modicon M218 Logic Controller (all versions)Modicon M241 Logic Controller (all versions)Modicon M251 Logic Controller (all versions)Modicon M258 Logic Controller (all versions)