Vulnerabilities > CVE-2020-28220 - Unspecified vulnerability in Schneider-Electric Modicon M258 Firmware, Somachine and Somachine Motion
Attack vector
ADJACENT_NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH low complexity
schneider-electric
Summary
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Modicon M258 Firmware (All versions prior to V5.0.4.11) and SoMachine/SoMachine Motion software (All versions), that could cause a buffer overflow when the length of a file transferred to the webserver is not verified.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 1 | |
| Hardware | 1 | |
| Application | 2 |