Medium severity5.7NVD Advisory· Published Nov 19, 2020· Updated May 29, 2026
CVE-2020-7567
CVE-2020-7567
Description
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to find the password hash when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller and broke the encryption keys.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:o:schneider-electric:modicon_m221_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:schneider-electric:modicon_m221_firmware:-:*:*:*:*:*:*:*
- (no CPE)range: all versions
- Schneider Electric/Modicon M221description
Patches
Vulnerability mechanics
References
2- us-cert.cisa.gov/ics/advisories/icsa-20-343-04nvdThird Party AdvisoryUS Government Resource
- www.se.com/ww/en/download/document/SEVD-2020-315-05/nvdVendor Advisory
News mentions
0No linked articles in our index yet.