{"id":"CVE-2020-7567","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-7567","generatedAt":"2026-10-27T22:25:08.585Z","title":"A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to find the password hash when the attacker has captured the traffic between EcoStruxure Machine - Basic…","description":"A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to find the password hash when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller and broke the encryption keys.","published":"2020-11-19T22:15:15.000Z","lastModified":"2026-06-17T03:25:02.000Z","status":"Modified","sourceIdentifier":"cybersecurity@se.com","cvss":{"version":"3.1","score":5.7,"severity":"MEDIUM","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},"cwe":["CWE-311"],"affected":["schneider-electric/modicon m221 firmware"],"epss":{"score":0.00204,"percentile":0.1025,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04","tags":["Third Party Advisory","US Government Resource"],"source":"cybersecurity@se.com"},{"url":"https://www.se.com/ww/en/download/document/SEVD-2020-315-05/","tags":["Vendor Advisory"],"source":"cybersecurity@se.com"},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.se.com/ww/en/download/document/SEVD-2020-315-05/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-7567","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}