PT-2018-1526 · Schneider Electric · Modicon M221

Yehonatan Kfir · Publicado 2018-07-30 · Atualizado 2026-05-29 · CVE-2018-7789

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Modicon M221 versions prior to V1.6.2.0

Description The issue is related to an improper check for unusual or exceptional conditions, allowing unauthorized users to remotely reboot the device using crafted programming protocol frames. This can be exploited by a remote attacker to reboot the Modicon M221 device.

Recommendations For versions prior to V1.6.2.0, update the firmware to version V1.6.2.0 or later to resolve the issue. As a temporary workaround, consider restricting remote access to the device until the update can be applied.

Correção

Improper Check for Exceptional Conditions

Enumeração de Fraquezas

CWE-754

Identificadores relacionados

BDU:2018-01081

CVE-2018-7789

Produtos afetados

Modicon M221

Referências · 8

• https://osv.dev/vulnerability/CVE-2018-7789 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7789 · Nota de Segurança
• https://securityfocus.com/bid/105171/info · Nota
• https://schneider-electric.com/en/download/document/SEVD-2018-233-01 · Aviso do Fabricante
• https://t.me/cveNotify/165206 · Publicação no Telegram
• http://securityfocus.com/bid/105171 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-18-240-02 · Nota
• https://bdu.fstec.ru/vul/2018-01081 · Nota de Segurança