Back to search
CVE-2018-7790
Published: Aug 29, 2018
Modified: May 29, 2026
PUBLISHED
Description
An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a Modicon M221, the attacker can upload the original program from the PLC.
| Vendor | Product | Versions |
|---|---|---|
Schneider Electric SE | Modicon M221, all references, all versions prior to firmware V1.6.2.0 | affected Modicon M221, all references, all versions prior to firmware V1.6.2.0 |
References
105182
vdb-entry
x_refsource_BID
https://www.schneider-electric.com/en/download/document/SEVD-2018-235-01/
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now