Vulnerability in Schneider-Electric Modicon Tm221ce16r
CVE-2017-7574
Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file, by prompting the user for a password. This XML file is AES-CBC encrypted; however, the key used for encryption (SoMachineBasicSoMachineBasicSoMa) cannot be changed. After decrypting the XML file with this key, the user password can be found in the decrypted data. After reading the user password, the project can be opened and modified with the Schneider product.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.013 (69.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 69th percentile — 69.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000
Affected products
- Schneider-Electric Modicon Tm221ce16r
- Schneider-Electric Modicon Tm221ce16r Firmware — versions 1.3.3.3
- Schneider-Electric Somachine — versions 1.4
Weakness classification (CWE)
References
- download.schneider-electric.com/files (Vendor Advisory)
- os-s.net/advisories/OSS-2017-02.pdf (Broken Link)
- www.securityfocus.com/bid/97518 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2017-7574?
- CVE-2017-7574 is a critical-severity vulnerability in Schneider-Electric Modicon Tm221ce16r, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2017-04-06.
- How severe is CVE-2017-7574?
- Critical severity. CVSS v3 base score is 9.8 out of 10.