CVE-2018-7789

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to remotely reboot Modicon M221 using crafted programing protocol frames.

Score

CVSS 3.1 7.5 High

Status

Modified - cybersecurity@se.com

Published

2018-08-29

Last modified

2026-05-29

Weaknesses

CWE-754

Affected products

• Modicon M221 Firmware (Schneider-electric)
• All References (Schneider Electric Se)
• All Versions Prior To Firmware V1.6.2.0 (Schneider Electric Se)
• Modicon M221 (Schneider Electric Se)

References

• http://www.securityfocus.com/bid/105171
• https://ics-cert.us-cert.gov/advisories/ICSA-18-240-02
• https://www.schneider-electric.com/en/download/document/SEVD-2018-233-01/