PT-2019-1482 · Schneider Electric · Modicon M221+1

Published

2019-02-14

·

Updated

2026-05-29

·

CVE-2018-7821

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Modicon M221 versions prior to V1.10.0.0 SoMachine Basic (affected versions not specified)
Description The issue is related to an incorrect configuration of the Ethernet interface in the Modicon M221 programmable logic controller when the Ethernet/IP adapter is activated. Exploitation of this issue can allow an attacker to impact the cycle time of the control program by generating a network flood on the Ethernet interface.
Recommendations For Modicon M221 versions prior to V1.10.0.0, update to firmware V1.10.0.0 or later to resolve the issue. For SoMachine Basic, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the Ethernet interface when the Ethernet/IP adapter is activated to minimize the risk of exploitation.

Resource Exhaustion

Allocation of Resources Without Limits

Weakness Enumeration

CWE-2CWE-400CWE-770

Related Identifiers

BDU:2019-00890
CVE-2018-7821

Affected Products

Modicon M221
Somachine Basic