Vulnerabilities > Schneider Electric > Somachine > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-04-22 CVE-2020-7487 Insufficient Verification of Data Authenticity vulnerability in Schneider-Electric products
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.
network
low complexity
schneider-electric CWE-345
critical
9.8
2017-04-06 CVE-2017-7574 Use of Hard-coded Credentials vulnerability in Schneider-Electric Modicon Tm221Ce16R Firmware and Somachine
Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability.
network
low complexity
schneider-electric CWE-798
critical
9.8