QwikSec

Security Database

CVE

CWE

Training

CVE-2020-7567

Published: Nov 19, 2020

Modified: May 29, 2026

PUBLISHED

Description

A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to find the password hash when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller and broke the encryption keys.

Vendor	Product	Versions
n/a	Modicon M221, all references, all versions	affected `Modicon M221, all references, all versions`

Weaknesses (CWE)

References

https://www.se.com/ww/en/download/document/SEVD-2020-315-05/

x_refsource_MISC

https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.