{"id":"CVE-2020-7568","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-7568","generatedAt":"2026-10-28T06:48:57.888Z","title":"A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 (all references, all versions) that could allow non sensitive information disclosure when the attacker has captured the traffic between…","description":"A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 (all references, all versions) that could allow non sensitive information disclosure when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller.","published":"2020-11-19T22:15:15.000Z","lastModified":"2026-06-17T03:25:02.000Z","status":"Modified","sourceIdentifier":"cybersecurity@se.com","cvss":{"version":"3.1","score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},"cwe":["CWE-200"],"affected":["schneider-electric/modicon m221 firmware"],"epss":{"score":0.00523,"percentile":0.44157,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.52%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04","tags":["Third Party Advisory","US Government Resource"],"source":"cybersecurity@se.com"},{"url":"https://www.se.com/ww/en/download/document/SEVD-2020-315-05/","tags":["Vendor Advisory"],"source":"cybersecurity@se.com"},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-20-343-04","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.se.com/ww/en/download/document/SEVD-2020-315-05/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-7568","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}