Known vulnerabilities in Modicon M221

Vendor: Schneider Electric
Software: Modicon M221
Software CPE: cpe:2.3:h:schneider_electric:modicon_m221:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Modicon M221 Modicon M221 is affected by 11 known vulnerabilities: 1 high, 10 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48918 - Inadequate Encryption Strength
CVE-2020-7565		 CWE-326 Low
No
No
 - 19.11.2020 SB2020121015
#VU48919 -
CVE-2020-7566		 Low
No
No
 - 19.11.2020 SB2020121015
#VU48920 - Missing Encryption of Sensitive Data
CVE-2020-7567		 CWE-311 Low
No
No
 - 19.11.2020 SB2020121015
#VU48921 - Exposure of sensitive information to an unauthorized actor
CVE-2020-7568		 CWE-200 Low
No
No
 - 19.11.2020 SB2020121015
#VU48922 - Use of a One-Way Hash with a Predictable Salt
CVE-2020-28214		 CWE-760 Low
No
No
 - 19.11.2020 SB2020121015
#VU27384 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-7489		 CWE-74 High
No
No
 - 28.04.2020 SB2020042815
#VU15987 - Insufficient Verification of Data Authenticity
CVE-2018-7798		 CWE-345 Low
No
No
 - 20.11.2018 SB2018112111
#VU14555 - Permissions, Privileges, and Access Controls
CVE-2018-7792		 CWE-264 Low
No
No
 1.6.2.0 29.08.2018 SB2018082906
#VU14554 - Permissions, Privileges, and Access Controls
CVE-2018-7791		 CWE-264 Low
No
No
 1.6.2.0 29.08.2018 SB2018082906
#VU14553 - Information Management Errors
CVE-2018-7790		 CWE-199 Low
No
No
 1.6.2.0 29.08.2018 SB2018082906
#VU14552 - Improper Check or Handling of Exceptional Conditions
CVE-2018-7789		 CWE-703 Low
No
No
 1.6.2.0 28.08.2018 SB2018082906