CVE-2018-7789
published 2018-08-29CVE-2018-7789: An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior…
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
2.80%
84.8th percentile
An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to remotely reboot Modicon M221 using crafted programing protocol frames.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| schneider-electric | modicon_m221_firmware | < 1.6.2.0 | 1.6.2.0 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Schneider Electric Modicon M221
cisa_ics·2018-08-28·CVSS 7.5
[HIGH] Schneider Electric Modicon M221
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Schneider Electric Modicon M221
Last RevisedAugust 28, 2018
Alert CodeICSA-18-240-02
## 1. EXECUTIVE SUMMARY
-
CVSS v3 4.8
- ATTENTION: Exploitable remotely
- Vendor: Schneider Electric
- Equipment: Modicon M221
- Vulnerability: Improper Check for Unusual or Exceptional Conditions
## 2. RISK EVALUATION
Successful exploitation of this vulnerability could allow an unauthorized user to remotely reboot the device.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
The following versions of Modicon M221, a programmable logic controller (PLC), are affected:
- Modicon M221 all
GHSA
GHSA-mw2w-h237-7rhw: An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, all version
ghsa_unreviewed·2022-05-13
CVE-2018-7789 [HIGH] CWE-754 GHSA-mw2w-h237-7rhw: An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, all version
An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to remotely reboot Modicon M221 using crafted programing protocol frames.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/105171https://ics-cert.us-cert.gov/advisories/ICSA-18-240-02https://www.schneider-electric.com/en/download/document/SEVD-2018-233-01/http://www.securityfocus.com/bid/105171https://ics-cert.us-cert.gov/advisories/ICSA-18-240-02https://www.schneider-electric.com/en/download/document/SEVD-2018-233-01/
2018-08-29
Published