Skip to content
Fencer Vulns
high 7.2

CVE-2020-16231 json

All Bachmann M1 System Processor Modules - Use of Password Hash with Insufficient Computational Effort

published 2022-05-19 4 y ago modified 2026-06-17 4 mo ago also EUVD-2020-8197

cvss
7.2
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.9%
EPSS 0.9% chance of exploitation in 30 days, percentile 59%
public exploits
0
none known

Summary

The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX207, MX213, MX220, MC206, MC212, MC220, and MH230 hardware controllers, and affected end-of-life controller include MC205, MC210, MH212, ME203, CS200, MP213, MP226, MPC240, MPC265, MPC270, MPC293, MPE270, and CPC210 hardware controllers. Security Level 0 is set at default from the manufacturer, which could allow an unauthenticated remote attacker to gain access to the password hashes. Security Level 4 is susceptible if an authenticated remote attacker or an unauthenticated person with physical access to the device reads and decrypts the password to conduct further attacks.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-21-026-02 updated cvss 7.2

All Bachmann M1 System Processor Modules

  • Bachmann Electronic, GmbH M-Base Operating Systems and Middleware >= MSYS v1.06.14
    affected: mitigation “Update the default username and password in the default Bachmann login handler for field operations.” oc.bachmann.info

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
18 mo ago

Exploit prediction

0.88% chance of exploitation in the next 30 days, higher than 59% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P

Affected products

  • Bachmann Electronic, GmbH M1 Hardware Controller MX207
  • Bachmann Electronic, GmbH M1 Hardware Controller MX213
  • Bachmann Electronic, GmbH M1 Hardware Controller MX220
  • Bachmann Electronic, GmbH M1 Hardware Controller MC206
  • Bachmann Electronic, GmbH M1 Hardware Controller MC212
  • Bachmann Electronic, GmbH M1 Hardware Controller MC220
  • Bachmann Electronic, GmbH M1 Hardware Controller MH230
  • Bachmann Electronic, GmbH M1 Hardware Controller MC205
  • Bachmann Electronic, GmbH M1 Hardware Controller MC210
  • Bachmann Electronic, GmbH M1 Hardware Controller MH212
  • Bachmann Electronic, GmbH M1 Hardware Controller ME203
  • Bachmann Electronic, GmbH M1 Hardware Controller CS200
  • Bachmann Electronic, GmbH M1 Hardware Controller MP213
  • Bachmann Electronic, GmbH M1 Hardware Controller MP226
  • Bachmann Electronic, GmbH M1 Hardware Controller MPC240
  • Bachmann Electronic, GmbH M1 Hardware Controller MPC265
  • Bachmann Electronic, GmbH M1 Hardware Controller MPC270
  • Bachmann Electronic, GmbH M1 Hardware Controller MPC293
  • Bachmann Electronic, GmbH M1 Hardware Controller MPE270
  • Bachmann Electronic, GmbH M1 Hardware Controller CPC210

Classification

Weakness
  • CWE-916 Use of Password Hash With Insufficient Computational Effort

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.