VYPR

Modicon TM221CE16R

by Schneider Electric

CVEs (2)

  • CVE-2017-7575CriApr 6, 2017
    risk 0.64cvss 9.8epss 0.04

    Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus port (502/tcp). Subsequently the application may be arbitrarily downloaded,…

  • CVE-2017-7574CriApr 6, 2017
    risk 0.64cvss 9.8epss 0.01

    Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file, by prompting the user for a…