CVE-2017-7575 Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus po...
CriticalCVSS 9.8
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus port (502/tcp). Subsequently the application may be arbitrarily downloaded, modified, and uploaded.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric modicon tm221ce16r firmware | = 1.3.3.3 | No fix listed |
References
- download.schneider-electric.com
- 97523 third-party-advisory vdb-entry
- os-s.net exploit third-party-advisory