NetSight
IP …
critical9.8

CVE-2020-7487

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M2…

Impact

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.

Affected products

VendorProductAffected versions
Schneider-ElectricEcostruxure Machine Expert
All versions
Schneider-ElectricSomachine
All versions
Schneider-ElectricSomachine Motion
All versions
Schneider-ElectricModicon M218 Firmware
All versions
Schneider-ElectricModicon M241 Firmware
All versions
Schneider-ElectricModicon M251 Firmware
All versions
Schneider-ElectricModicon M258 Firmware
All versions

Weakness classification

CWE-345

References