Schneider Electric Modicon TM221CE16R Firmware vulnerabilities

2 CVEs affecting Schneider Electric Modicon TM221CE16R Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-7575, published 2017-04-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-7575, published 2017-04-06. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01\x5a\x00\x03\x00 request to the Modbus…
CVE-2017-7574, published 2017-04-06. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized…