描述
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.
AI分析AI驱动
受影响产品
schneider-electricecostruxure_machine_expert
schneider-electricsomachine
schneider-electricsomachine_motion
schneider-electricmodicon_m218_firmware
schneider-electricmodicon_m218
-
schneider-electricmodicon_m241_firmware
schneider-electricmodicon_m241
-
schneider-electricmodicon_m251_firmware
schneider-electricmodicon_m251
-
schneider-electricmodicon_m258_firmware
schneider-electricmodicon_m258
-
参考资料
- https://www.se.com/ww/en/download/document/SEVD-2020-105-02Vendor Advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-105-02Vendor Advisory