Medium severity6.8NVD Advisory· Published Dec 11, 2020· Updated May 28, 2026

CVE-2020-28220

Description

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Modicon M258 Firmware (All versions prior to V5.0.4.11) and SoMachine/SoMachine Motion software (All versions), that could cause a buffer overflow when the length of a file transferred to the webserver is not verified.

Affected products

Modicon/Modicon M258 Firmwaredescription
Schneider Electric/SoMachine/SoMachine Motionllm-fuzzy
Schneider Electric/Modicon M251llm-fuzzy
Range: <5.0.4.11

Patches

Vulnerability mechanics

References

www.se.com/ww/en/download/document/SEVD-2020-343-09/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000