Vulnerability in Schneider-Electric Modicon Tm221ce16r
CVE-2017-7574
Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file, by prompting the user for a password. This XML file is AES-CBC encrypted; however, the key used for encryption (SoMachineBasicSoMachineBasicSoMa) cannot be changed. After decrypting the XML file with this key, the user password can be found in the decrypted data. After reading the user password, the project can be opened and modified with the Schneider product.
EPSS: 0.013 (67.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Schneider-electric Modicon_tm221ce16r
- Schneider-electric Modicon_tm221ce16r_firmware — versions 1.3.3.3
- Schneider-electric Somachine — versions 1.4
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC, Broken Link)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2017-7574?
- CVE-2017-7574 is a critical-severity vulnerability in Schneider-Electric Modicon Tm221ce16r, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2017-04-06.
- How severe is CVE-2017-7574?
- Critical severity. CVSS v3 base score is 9.8 out of 10.