CVE-2020-28214CWE-760

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to…

Critical · published December 11, 2020

CVSS v3.1
9.8
EPSS
1%
Percentile
53.9
In the wild
Unconfirmed
What it is

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictable salt would provide.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00734 · 53.9th percentile
Weakness
CWE-760 · Use of a One-Way Hash with a Predictable Salt
Published
2020-12-11T00:51Z
EPSS history
Timeline
  • 11 DEC 00:51Z
    A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to…
    cvelistv5