CVE-2020-7487 - AskarLabs CVE Database

CVE-2020-7487

Vendor N/A

Product EcoStruxure Machine Expert (all versions)SoMachine, SoMachine Motion (all versions)Modicon M218 Logic Controller (all versions)Modicon M241 Logic Controller (all versions)Modicon M251 Logic Controller (all versions)Modicon M258 Logic Controller (all versi

Weakness CWE-345

Published April 22, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.

Key dates

02Disclosure timeline

April 22, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-7487 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/345.html

Identifiers

CVE CVE-2020-7487

CWE CWE-345

Affected versions

Vendor N/A

Affected EcoStruxure Machine Expert (all versions)SoMachine, SoMachine Motion (all versions)Modicon M218 Logi