VYPR

Modicon M218

by Schneider Electric

CVEs (2)

  • CVE-2020-7487CriApr 22, 2020
    risk 0.64cvss 9.8epss 0.01

    A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.

  • CVE-2020-7488HigApr 22, 2020
    risk 0.49cvss 7.5epss 0.01

    A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.