PT-2018-1526 · Schneider Electric · Modicon M221

Yehonatan Kfir · Published 2018-07-30 · Updated 2026-05-29 · CVE-2018-7789

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Modicon M221 versions prior to V1.6.2.0

Description The issue is related to an improper check for unusual or exceptional conditions, allowing unauthorized users to remotely reboot the device using crafted programming protocol frames. This can be exploited by a remote attacker to reboot the Modicon M221 device.

Recommendations For versions prior to V1.6.2.0, update the firmware to version V1.6.2.0 or later to resolve the issue. As a temporary workaround, consider restricting remote access to the device until the update can be applied.

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

BDU:2018-01081

CVE-2018-7789

Affected Products

Modicon M221

References · 8

• https://osv.dev/vulnerability/CVE-2018-7789 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7789 · Security Note
• https://schneider-electric.com/en/download/document/SEVD-2018-233-01 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01081 · Security Note
• https://securityfocus.com/bid/105171/info · Note
• https://t.me/cveNotify/165206 · Telegram Post
• http://securityfocus.com/bid/105171 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-240-02 · Note