NetSight
medium6.8

CVE-2020-28220

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Modicon M258 Firmware (All versions prior to V5.0.4.…

Impact

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Modicon M258 Firmware (All versions prior to V5.0.4.11) and SoMachine/SoMachine Motion software (All versions), that could cause a buffer overflow when the length of a file transferred to the webserver is not verified.

Affected products

VendorProductAffected versions
Schneider-ElectricModicon M258 Firmware
before 5.0.4.11
Schneider-ElectricSomachine
All versions
Schneider-ElectricSomachine Motion
All versions

Weakness classification

References