CVE-2020-7568

Name of the Vulnerable Software and Affected Versions Modicon M221 versions all Modicon M100 (affected versions not specified) Modicon M200 (affected versions not specified)

Description The issue is related to the exposure of sensitive information. It could allow a remote attacker to gain unauthorized access to protected information. The vulnerability exists in the traffic between EcoStruxure Machine - Basic software and the Modicon M221 controller, potentially leading to non-sensitive information disclosure when an attacker captures this traffic.

Recommendations For Modicon M221 versions all, consider restricting access to the traffic between EcoStruxure Machine - Basic software and the Modicon M221 controller to minimize the risk of exploitation. For Modicon M100 and Modicon M200, at the moment, there is no information about a newer version that contains a fix for this vulnerability.