fkie_nvd - fkie_cve-2020-16231

FKIE_CVE-2020-16231

Vulnerability from fkie_nvd - Published: 2022-05-19 18:15 - Updated: 2024-11-21 05:06

Severity ?

7.2 (High) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX207, MX213, MX220, MC206, MC212, MC220, and MH230 hardware controllers, and affected end-of-life controller include MC205, MC210, MH212, ME203, CS200, MP213, MP226, MPC240, MPC265, MPC270, MPC293, MPE270, and CPC210 hardware controllers. Security Level 0 is set at default from the manufacturer, which could allow an unauthenticated remote attacker to gain access to the password hashes. Security Level 4 is susceptible if an authenticated remote attacker or an unauthenticated person with physical access to the device reads and decrypts the password to conduct further attacks.

References

	URL	Tags
	ics-cert@hq.dhs.gov	https://www.cisa.gov/uscert/ics/advisories/icsa-21-026-02	Third Party Advisory, US Government Resource
	af854a3a-2127-422b-91ae-364da2661108	https://www.cisa.gov/uscert/ics/advisories/icsa-21-026-02	Third Party Advisory, US Government Resource

Impacted products

Vendor	Product	Version
bachmann	mx207_firmware	*
bachmann	mx207	-
bachmann	mx213_firmware	*
bachmann	mx213	-
bachmann	mx220_firmware	*
bachmann	mx220	-
bachmann	mc206_firmware	*
bachmann	mc206	-
bachmann	mc212_firmware	*
bachmann	mc212	-
bachmann	mc220_firmware	*
bachmann	mc220	-
bachmann	mh230_firmware	*
bachmann	mh230	-
bachmann	mc205_firmware	*
bachmann	mc205	-
bachmann	mc210_firmware	*
bachmann	mc210	-
bachmann	mh212_firmware	*
bachmann	mh212	-
bachmann	me203_firmware	*
bachmann	me203	-
bachmann	cs200_firmware	*
bachmann	cs200	-
bachmann	mp213_firmware	*
bachmann	mp213	-
bachmann	mp226_firmware	*
bachmann	mp226	-
bachmann	mpc240_firmware	*
bachmann	mpc240	-
bachmann	mpc265_firmware	*
bachmann	mpc265	-
bachmann	mpc270_firmware	*
bachmann	mpc270	-
bachmann	mpc293_firmware	*
bachmann	mpc293	-
bachmann	mpe270_firmware	*
bachmann	mpe270	-
bachmann	cpc210_firmware	*
bachmann	cpc210	-

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mx207_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9114FA6-7053-49B6-B35B-E3908F9C2F6C",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mx207:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2DBAD58-D7CE-4DB3-9025-265C5E1C04BA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mx213_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FCE43AF6-2FD3-4B80-A38B-B765F53393D7",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mx213:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "79EC5F34-D2EE-4E74-B34D-67ED0AB0B5D9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mx220_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "81385881-3C0C-4AC6-AA26-8C9228919DF6",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mx220:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC9E05D2-0F4C-4FCC-8BAE-21719DB58C6D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mc206_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CE81E112-8112-450E-B876-450FA625FFE2",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mc206:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B76F13B-4E25-470B-A85B-AA2AB2C4BE76",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mc212_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A00706D-A447-4972-A7D1-43867580034B",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mc212:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D735DF2-677C-444C-BE6F-1577C3058BE6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mc220_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1972146-166F-4F7F-AB36-BE5C75018CEE",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mc220:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "04B9FA8F-6A94-4FB3-BBF7-FEF709A7DBF4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mh230_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "886299CA-0436-404E-AA86-B7C2570D5945",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mh230:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5CCFE848-2C20-43D3-B896-FFBA1F34F1A3",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mc205_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD1DC46B-6F78-4CE0-AB0F-DDC0915EC821",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mc205:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "519AECD3-0AA1-4E50-B23F-5E32E314AEB6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mc210_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "ECD868FF-1AA7-4353-9959-E88CCCD14D20",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mc210:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4DFCB73-D3D5-4B87-9033-2672D44233A6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mh212_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C567B63-FAD0-41FE-B558-E2205B6B0AC9",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mh212:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "427EE4C8-AB8A-4FF9-9181-78D5296AC92F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:me203_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "502B3EE3-FBA6-42E3-90B6-8D656280E0CD",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:me203:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A213457-13C9-4C98-BA22-1DDD983DDB3A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:cs200_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CBCA1F60-0575-49EF-8C32-B729F5D5C472",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:cs200:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D5ED713-5C6B-4241-B4E9-44B224DDD55A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mp213_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EDED1C91-6774-4A1A-BF1E-185C23F9B6FD",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mp213:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F0BE9F6C-7276-4767-B0F2-543BB2B8E2DA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mp226_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F7DED54-D992-4C19-98BD-5D05F545F7DD",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mp226:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B40031C-54CC-4AFA-9FF6-A58EE165D70B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mpc240_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1602D76E-F7E0-45DB-9EEA-DA189FD4ACE2",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mpc240:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5855D3E2-592C-4A7F-9F4F-103E5DA1062D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mpc265_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "10BDE882-8388-420F-9B4C-A83C7066006F",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mpc265:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F40F6B46-A321-455C-8C44-34F5269CAB72",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mpc270_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "762532D1-BBFB-4B2C-A76A-28FC3D1245C8",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mpc270:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "02CC3132-842D-4E95-863F-233F18EBB9AE",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mpc293_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AFDFC58B-F9F0-421D-820F-8946327523E1",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mpc293:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "213DE90F-3D6D-486C-AEB6-5704F530633E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:mpe270_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "84458D24-9450-4BDB-AD22-FE13F55C34A4",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:mpe270:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B691A439-CFBF-4D47-A078-9F08634718C9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bachmann:cpc210_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2960D20D-9BD0-49B2-BEDD-F0A04DE8EEC7",
              "versionStartIncluding": "1.06.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bachmann:cpc210:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A1C8A92-C72A-4463-A369-436660EF6A47",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX207, MX213, MX220, MC206, MC212, MC220, and MH230 hardware controllers, and affected end-of-life controller include MC205, MC210, MH212, ME203, CS200, MP213, MP226, MPC240, MPC265, MPC270, MPC293, MPE270, and CPC210 hardware controllers. Security Level 0 is set at default from the manufacturer, which could allow an unauthenticated remote attacker to gain access to the password hashes. Security Level 4 is susceptible if an authenticated remote attacker or an unauthenticated person with physical access to the device reads and decrypts the password to conduct further attacks."
    },
    {
      "lang": "es",
      "value": "Los controladores Bachmann Electronic M-Base afectados de la versi\u00f3n MSYS v1.06.14 y posteriores, usan una criptograf\u00eda d\u00e9bil para proteger las contrase\u00f1as de los dispositivos. Los controladores afectados que reciben soporte activo incluyen los controladores de hardware MX207, MX213, MX220, MC206, MC212, MC220 y MH230, y los controladores afectados al final de su vida \u00fatil incluyen los controladores de hardware MC205, MC210, MH212, ME203, CS200, MP213, MP226, MPC240, MPC265, MPC270, MPC293, MPE270 y CPC210. El nivel de seguridad 0 est\u00e1 configurado por defecto por el fabricante, lo que podr\u00eda permitir a un atacante remoto no autenticado acceder a los hashes de las contrase\u00f1as. El nivel de seguridad 4 es susceptible de a un atacante remoto autenticado o una persona no autenticada con acceso f\u00edsico al dispositivo leer y descifrar la contrase\u00f1a para conducir otros ataques"
    }
  ],
  "id": "CVE-2020-16231",
  "lastModified": "2024-11-21T05:06:59.240",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 5.9,
        "source": "ics-cert@hq.dhs.gov",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2022-05-19T18:15:08.487",
  "references": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-026-02"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-026-02"
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-916"
        }
      ],
      "source": "ics-cert@hq.dhs.gov",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-916"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2020-16231 (GCVE-0-2020-16231)

Vulnerability from cvelistv5 – Published: 2022-05-19 17:21 – Updated: 2025-04-16 17:54

Summary

Severity ?

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-916 - Use of Password Hash With Insufficient Computational Effort

Assigner

icscert

References

URL

Tags

https://www.cisa.gov/uscert/ics/advisories/icsa-2…

x_refsource_MISC

Impacted products

Vendor

Product

Version

Bachmann Electronic, GmbH

M1 Hardware Controller MX207

Affected: MSYS v1.06.14 , < All* (custom)

Bachmann Electronic, GmbH	M1 Hardware Controller MX213	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MX220	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MC206	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MC212	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MC220	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MH230	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MC205	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MC210	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MH212	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller ME203	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller CS200	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MP213	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MP226	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MPC240	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MPC265	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MPC270	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MPC293	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller MPE270	Affected: MSYS v1.06.14 , < All* (custom)
Bachmann Electronic, GmbH	M1 Hardware Controller CPC210	Affected: MSYS v1.06.14 , < All* (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T13:37:54.211Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-026-02"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2020-16231",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-16T17:29:07.347671Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-16T17:54:00.512Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "M1 Hardware Controller MX207",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MX213",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MX220",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MC206",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MC212",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MC220",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MH230",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MC205",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MC210",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MH212",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller ME203",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller CS200",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MP213",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MP226",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MPC240",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MPC265",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MPC270",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MPC293",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller MPE270",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "M1 Hardware Controller CPC210",
          "vendor": "Bachmann Electronic, GmbH",
          "versions": [
            {
              "lessThan": "All*",
              "status": "affected",
              "version": "MSYS v1.06.14",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX207, MX213, MX220, MC206, MC212, MC220, and MH230 hardware controllers, and affected end-of-life controller include MC205, MC210, MH212, ME203, CS200, MP213, MP226, MPC240, MPC265, MPC270, MPC293, MPE270, and CPC210 hardware controllers. Security Level 0 is set at default from the manufacturer, which could allow an unauthenticated remote attacker to gain access to the password hashes. Security Level 4 is susceptible if an authenticated remote attacker or an unauthenticated person with physical access to the device reads and decrypts the password to conduct further attacks."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-916",
              "description": "CWE-916 Use of Password Hash With Insufficient Computational Effort",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-19T17:21:37.000Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-026-02"
        }
      ],
      "source": {
        "advisory": "ICSA-21-026-02",
        "discovery": "UNKNOWN"
      },
      "title": "All Bachmann M1 System Processor Modules - Use of Password Hash with Insufficient Computational Effort",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "ID": "CVE-2020-16231",
          "STATE": "PUBLIC",
          "TITLE": "All Bachmann M1 System Processor Modules - Use of Password Hash with Insufficient Computational Effort"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "M1 Hardware Controller MX207",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MX213",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MX220",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MC206",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MC212",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MC220",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MH230",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MC205",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MC210",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MH212",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller ME203",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller CS200",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MP213",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MP226",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MPC240",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MPC265",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MPC270",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MPC293",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller MPE270",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "M1 Hardware Controller CPC210",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "All",
                            "version_value": "MSYS v1.06.14"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Bachmann Electronic, GmbH"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX207, MX213, MX220, MC206, MC212, MC220, and MH230 hardware controllers, and affected end-of-life controller include MC205, MC210, MH212, ME203, CS200, MP213, MP226, MPC240, MPC265, MPC270, MPC293, MPE270, and CPC210 hardware controllers. Security Level 0 is set at default from the manufacturer, which could allow an unauthenticated remote attacker to gain access to the password hashes. Security Level 4 is susceptible if an authenticated remote attacker or an unauthenticated person with physical access to the device reads and decrypts the password to conduct further attacks."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-916 Use of Password Hash With Insufficient Computational Effort"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-026-02",
              "refsource": "MISC",
              "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-026-02"
            }
          ]
        },
        "source": {
          "advisory": "ICSA-21-026-02",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2020-16231",
    "datePublished": "2022-05-19T17:21:37.000Z",
    "dateReserved": "2020-07-31T00:00:00.000Z",
    "dateUpdated": "2025-04-16T17:54:00.512Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

FKIE_CVE-2020-16231

CVE-2020-16231 (GCVE-0-2020-16231)

Tags

Sightings

Nomenclature