CVE-2017-7574: schneider-electric modicon_tm221ce16r_firmware Use of Hard-coded Credentials

Vulnerability summary

CVE-2017-7574 is a critical (CVSS 10.0) Use of Hard-coded Credentials vulnerability in schneider-electric modicon_tm221ce16r_firmware. EPSS estimates a 1.25% chance of exploitation in the next 30 days, higher than 69.2% of scored vulnerabilities.

Timeline

1. 06-04-2017
   PublishedVulnerability first disclosed.
2. 29-05-2026
   Last modifiedVulnerability information updated.

Description

Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file, by prompting the user for a password. This XML file is AES-CBC encrypted; however, the key used for encryption (SoMachineBasicSoMachineBasicSoMa) cannot be changed. After decrypting the XML file with this key, the user password can be found in the decrypted data. After reading the user password, the project can be opened and modified with the Schneider product.

• CWE-798Use of Hard-coded CredentialsThe product contains hard-coded credentials, such as a password or cryptographic key.
• CWE-321Use of Hard-coded Cryptographic KeyThe product uses a hard-coded, unchangeable cryptographic key.