Modicon Tm221Ce16R Firmware CVE Vulnerabilities

By Schneider-Electric — 2 known vulnerabilities

Critical
2
High
0
Medium
0
Low
0
None
0

All Modicon Tm221Ce16R Firmware CVEs

Recent Highest Score Oldest
CVE-2017-7575
9.8 critical

Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus port (502/tcp). Subsequently the application may be arbitrarily downloaded, modified, and uploaded.

Apr 6, 2017
CVE-2017-7574
9.8 critical

Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file, by prompting the user for a password. This XML fil

Apr 6, 2017