CVE-2018-7798

A Insufficient Verification of Data Authenticity (CWE-345) vulnerability exists in the Modicon M221, all versions, which could cause a change of IPv4 configuration (IP address, mask and gateway) when remotely connected to the device.

Score

CVSS 3.1 8.2 High

Status

Modified - cybersecurity@se.com

Published

2018-11-02

Last modified

2026-05-29

Weaknesses

CWE-345

Affected products

• Somachine Basic (Schneider-electric)
• All Versions (Schneider Electric Se)
• Modicon M221 (Schneider Electric Se)

References

• http://www.securityfocus.com/bid/105970
• https://www.schneider-electric.com/en/download/document/SEVD-2018-270-01/