PT-2020-6298 · Schneider Electric · Modicon M251+3

Published 2020-04-14 · Updated 2026-05-28 · CVE-2020-7488

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Modicon M218, M241, M251, and M258 controllers (affected versions not specified)

Description A Cleartext Transmission of Sensitive Information issue exists, which could leak sensitive information transmitted between the software and the controllers. This issue is related to the lack of protection for transmitted data. Exploitation of this issue could allow a remote attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

BDU:2021-04089

CVE-2020-7488

Affected Products

Modicon M218

Modicon M241

Modicon M251

Modicon M258

References · 7

• https://bdu.fstec.ru/vul/2021-04089 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-7488 · Security Note
• https://se.com/ww/en/download/document/SEVD-2020-105-02 · Vendor Advisory
• https://t.me/cvenotify/3057 · Telegram Post
• https://t.me/cveNotify/165103 · Telegram Post
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2020-105-02_Modicon+M218_M241_M251_M258_M258_Logic_Controllers_SoMachine_SoMachine_Motion_EcoStruxure_Machine_Expert_Security_Notification_V1.1.pdf&p_Doc_Ref=SEVD-2020-105-02 · Note
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2020-105-02_Modicon+M218_M241_M251_M258_M258_Logic_Controllers_SoMachine_SoMachine_Motion_EcoStruxure_Machine_Expert_Security_Notification_V1.1.pdf&p_Doc_Ref=SEVD-2020-105-02 · Note