ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score
← Back to results

CVE-2020-16231

The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX207, MX213, MX220, MC206, MC212, MC220, and MH230 hardware controllers, and affected end-of-life controller include MC205, MC210, MH212, ME203, CS200, MP213, MP226, MPC240, MPC265, MPC270, MPC293, MPE270, and CPC210 hardware controllers. Security Level 0 is set at default from the manufacturer, which could allow an unauthenticated remote attacker to gain access to the password hashes. Security Level 4 is susceptible if an authenticated remote attacker or an unauthenticated person with physical access to the device reads and decrypts the password to conduct further attacks.
7.2
CVSS
4.8
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
CVSS v4.0 Metrics
Exploitability
Attack VectorNetwork
ComplexityLow
RequirementsPresent
PrivilegesHigh
User InteractionNone
Threat
Exploit MaturityUnreported
Vulnerable System
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Patch StatusUnavailable

Change Log
DateSourceChangesScore
2026-07-21cve.orginitial, patch: Unavailable4.8
References: CVE.org · NVD

Affected Software
VendorProductVersion
bachmanncpc210_firmware≥ 1.06.14
bachmanncs200_firmware≥ 1.06.14
bachmannmc205_firmware≥ 1.06.14
bachmannmc206_firmware≥ 1.06.14
bachmannmc210_firmware≥ 1.06.14
bachmannmc212_firmware≥ 1.06.14
bachmannmc220_firmware≥ 1.06.14
bachmannme203_firmware≥ 1.06.14
bachmannmh212_firmware≥ 1.06.14
bachmannmh230_firmware≥ 1.06.14
bachmannmp213_firmware≥ 1.06.14
bachmannmp226_firmware≥ 1.06.14
bachmannmpc240_firmware≥ 1.06.14
bachmannmpc265_firmware≥ 1.06.14
bachmannmpc270_firmware≥ 1.06.14
bachmannmpc293_firmware≥ 1.06.14
bachmannmpe270_firmware≥ 1.06.14
bachmannmx207_firmware≥ 1.06.14
bachmannmx213_firmware≥ 1.06.14
bachmannmx220_firmware≥ 1.06.14
Bachmann Electronic, GmbHM1 Hardware Controller CPC210< All*
Bachmann Electronic, GmbHM1 Hardware Controller CS200< All*
Bachmann Electronic, GmbHM1 Hardware Controller MC205< All*
Bachmann Electronic, GmbHM1 Hardware Controller MC206< All*
Bachmann Electronic, GmbHM1 Hardware Controller MC210< All*
Bachmann Electronic, GmbHM1 Hardware Controller MC212< All*
Bachmann Electronic, GmbHM1 Hardware Controller MC220< All*
Bachmann Electronic, GmbHM1 Hardware Controller ME203< All*
Bachmann Electronic, GmbHM1 Hardware Controller MH212< All*
Bachmann Electronic, GmbHM1 Hardware Controller MH230< All*
Bachmann Electronic, GmbHM1 Hardware Controller MP213< All*
Bachmann Electronic, GmbHM1 Hardware Controller MP226< All*
Bachmann Electronic, GmbHM1 Hardware Controller MPC240< All*
Bachmann Electronic, GmbHM1 Hardware Controller MPC265< All*
Bachmann Electronic, GmbHM1 Hardware Controller MPC270< All*
Bachmann Electronic, GmbHM1 Hardware Controller MPC293< All*
Bachmann Electronic, GmbHM1 Hardware Controller MPE270< All*
Bachmann Electronic, GmbHM1 Hardware Controller MX207< All*
Bachmann Electronic, GmbHM1 Hardware Controller MX213< All*
Bachmann Electronic, GmbHM1 Hardware Controller MX220< All*
Published: 2022-05-19