PT-2019-1484 · Schneider Electric · Somachine Basic+1

Publicado 2019-02-14 · Atualizado 2022-01-31 · CVE-2018-7823

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SoMachine Basic versions prior to V1.10.0.0 Modicon M221 versions prior to V1.10.0.0

Description The issue is related to configuration errors in the software. Exploitation of this issue could allow a remote attacker to launch SoMachine Basic by sending specially crafted Ethernet messages.

Recommendations For SoMachine Basic versions prior to V1.10.0.0, update to version V1.10.0.0 or later to resolve the issue. For Modicon M221 versions prior to V1.10.0.0, update to version V1.10.0.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-2

Identificadores relacionados

BDU:2019-00892

CVE-2018-7823

Produtos afetados

Modicon M221

Somachine Basic

Referências · 6

• https://bdu.fstec.ru/vul/2019-00892 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-7823 · Nota de Segurança
• https://schneider-electric.com/en/download/document/SEVD-2019-045-01 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-7823 · Aviso do Fabricante
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2019-045-01-SoMachineBasic+M221.pdf&p_Doc_Ref=SEVD-2019-045-01 · Nota
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2019-045-01-SoMachineBasic+M221.pdf&p_Doc_Ref=SEVD-2019-045-01 · Nota