A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictable salt would provide.
References
| Link | Resource |
|---|---|
| https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04 | Third Party Advisory US Government Resource |
| https://www.se.com/ww/en/download/document/SEVD-2020-315-05/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
03 Feb 2022, 16:10
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04 - Third Party Advisory, US Government Resource | |
| First Time |
Schneider-electric modicon M221
|
|
| CPE | cpe:2.3:h:schneider-electric:modicon_m221:-:*:*:*:*:*:*:* |
31 Jan 2022, 19:55
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:schneider-electric:modicon_m221_firmware:*:*:*:*:*:*:*:* | |
| First Time |
Schneider-electric
Schneider-electric modicon M221 Firmware |
19 Aug 2021, 18:21
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:schneider-electric:modicon_m221:-:*:*:*:*:*:*:* |
cpe:2.3:o:se:modicon_m221_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:se:modicon_m221:-:*:*:*:*:*:*:* |
Information
Published : 2020-12-11 01:15
Updated : 2023-12-10 13:41
NVD link : CVE-2020-28214
Mitre link : CVE-2020-28214
CVE.ORG link : CVE-2020-28214
JSON object : View
Products Affected
schneider-electric
- modicon_m221
- modicon_m221_firmware
CWE
CWE-760
Use of a One-Way Hash with a Predictable Salt