CVE-2021-22731 CRITICAL

Published: 2021-05-26 | Last Modified: 2024-11-21 | Status: Modified

Description

Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior which could cause an unauthorized password change through HTTP / HTTPS when basic user information is known by a remote attacker.

Additional Descriptions (1)

Se presenta una vulnerabilidad del Mecanismo de Recuperación de Contraseña débil para Contraseña Olvidada en Modicon Managed Switch MCSESM* y MCSESP* versiones V8.21 y anteriores, lo que podría causar un cambio de contraseña no autorizada mediante protocolo HTTP / HTTPS cuando la información básica del usuario es conocida por un atacante remoto

CVSS Metrics

Base Score: 9.8 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	HIGH
Integrity Impact	HIGH
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 5.9

Base Score: 7.5 (HIGH)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	PARTIAL
Integrity Impact	PARTIAL
Availability Impact	PARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 6.4

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-640

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	mcsesp083f23g0_firmware	*	<built-in method update of dict object at 0x7e60eb26e7c0>	Operating System
schneider-electric	mcsesp083f23g0t_firmware	*	<built-in method update of dict object at 0x7e60eb26e340>	Operating System
schneider-electric	mcsesm043f23f0_firmware	*	<built-in method update of dict object at 0x7e60eb26d480>	Operating System
schneider-electric	mcsesm053f1cu0_firmware	*	<built-in method update of dict object at 0x7e6106846240>	Operating System
schneider-electric	mcsesm063f2cu0_firmware	*	<built-in method update of dict object at 0x7e6106844700>	Operating System
schneider-electric	mcsesm053f1cs0_firmware	*	<built-in method update of dict object at 0x7e6106844b80>	Operating System
schneider-electric	mcsesm063f2cs0_firmware	*	<built-in method update of dict object at 0x7e60bafae280>	Operating System
schneider-electric	mcsesm083f23f0_firmware	*	<built-in method update of dict object at 0x7e60eb26ff00>	Operating System
schneider-electric	mcsesm103f2cu0_firmware	*	<built-in method update of dict object at 0x7e60eb26c580>	Operating System
schneider-electric	mcsesm083f23f0h_firmware	*	<built-in method update of dict object at 0x7e6106844580>	Operating System
schneider-electric	mcsesm103f2cu0h_firmware	*	<built-in method update of dict object at 0x7e60eb26e000>	Operating System
schneider-electric	mcsesm103f2cs0h_firmware	*	<built-in method update of dict object at 0x7e60bafaed80>	Operating System
schneider-electric	mcsesm123f2lg0_firmware	*	<built-in method update of dict object at 0x7e6106844680>	Operating System
schneider-electric	mcsesm093f1cu0_firmware	*	<built-in method update of dict object at 0x7e6106846d40>	Operating System
schneider-electric	mcsesm093f1cs0_firmware	*	<built-in method update of dict object at 0x7e61068456c0>	Operating System
schneider-electric	mcsesm103f2cs0_firmware	*	<built-in method update of dict object at 0x7e60bafad680>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesp083f23g0_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesp083f23g0:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesp083f23g0t_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesp083f23g0t:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesm043f23f0_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesm043f23f0:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesm053f1cu0_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesm053f1cu0:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesm063f2cu0_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesm063f2cu0:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesm053f1cs0_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesm053f1cs0:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesm063f2cs0_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesm063f2cs0:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesm083f23f0_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesm083f23f0:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesm103f2cu0_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesm103f2cu0:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesm083f23f0h_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesm083f23f0h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesm103f2cu0h_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesm103f2cu0h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesm103f2cs0h_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesm103f2cs0h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesm123f2lg0_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesm123f2lg0:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesm093f1cu0_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesm093f1cu0:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesm093f1cs0_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesm093f1cs0:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:mcsesm103f2cs0_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:mcsesm103f2cs0:-:::::::*`

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-01
Source: [email protected]

Patch Vendor Advisory
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-01
Source: af854a3a-2127-422b-91ae-364da2661108

Patch Vendor Advisory