CVE-2020-28214

Katalog CVE

CVSS 5.5 · Medium EPSS 0,73%

Kerentanan Use of a One-Way Hash with a Predictable Salt pada schneider-electric modicon m221 firmware. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictable salt would provide.

Rincian

Terbit di NVD

11 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-760: Use of a One-Way Hash with a Predictable Salt

EPSS (30 hari)

0,73% peluang dieksploitasi; lebih tinggi dari 53,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.se.com/ww/en/download/document/SEVD-2020-315-05/ advisory vendor
• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04 advisory pihak ketiga · pemerintah AS