9.8 Critical

CVE-2020-28214 A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all…

Description

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictable salt would provide.

Affected products and versions

Product	Affected versions	Fixed in
Modicon M221 (all references, all versions)	Versions not published

Do you use Modicon M221 (all references, all versions)?

Track this CVE Watch Modicon M221 (all references, all versions) Check my SBOMs

www.cveye.io/en/cve/CVE-2020-28214

Timeline

Published December 11, 2020
Last modified May 28, 2026

References

www.se.com www.se.com
us-cert.cisa.gov us-cert.cisa.gov

Track this CVE