VULNERABILITY INTELLIGENCE

CVE-2020-7498

CVSS score9.8 CRITICAL
EPSS probability1.36%
CISA KEVNot currently listed
Published2020-06-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A CWE-798: Use of Hard-coded Credentials vulnerability exists in the Unity Loader and OS Loader Software (all versions). The fixed credentials are used to simplify file transfer. Today the use of fixed credentials is considered a vulnerability, which could cause unauthorized access to the file transfer service provided by the Modicon PLCs. This could result in various unintended results.

Weakness classification

  • cybersecurity@se.com: CWE-798
  • nvd@nist.gov: CWE-798

Primary references