CVE-2020-16231 All Bachmann M1 System Processor Modules - Use of Password Hash with Insufficient Computational Effort
Weak password hashing in Bachmann M1 controllers allows attackers to recover credentials and gain unauthorized access to industrial control systems.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-16231?
CVE-2020-16231 is a high-severity vulnerability in Bachmann Electronic, GmbH M1 Hardware Controller CPC210, published on 19 May 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX207, MX213, MX220, MC206, MC212, MC220, and MH230 hardware controllers, and affected end-of-life controller include MC205, MC210, MH212, ME203, CS200, MP213, MP226, MPC240, MPC265, MPC270, MPC293, MPE270, and CPC210 hardware controllers. Security Level 0 is set at default from the manufacturer, which could allow an unauthenticated remote attacker to gain access to the password hashes. Security Level 4 is susceptible if an authenticated remote attacker or an unauthenticated person with physical access to the device reads and decrypts the password to conduct further attacks.
Weakness: CWE-916
Which versions are affected by CVE-2020-16231?
It affects 20 products.
Products include Bachmann Cpc210 Firmware, Bachmann Cs200 Firmware, Bachmann Mc205 Firmware, Bachmann Mc206 Firmware, Bachmann Mc210 Firmware, Bachmann Mc212 Firmware and 14 more.
How do I fix CVE-2020-16231?
No fix has been published for CVE-2020-16231 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-16231 being exploited?
There is no known exploitation of CVE-2020-16231 in the wild and no public exploit code.
Sources
Also known as GHSA-hqr7-c67h-hjrc.