← Retour aux CVEs

CVE-2018-7790

CRITICAL

9.8

Description

An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a Modicon M221, the attacker can upload the original program from the PLC.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie8/29/2018

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

schneider-electric:modicon_m221schneider-electric:modicon_m221_firmware

Faiblesses (CWE)

CWE-294

References

http://www.securityfocus.com/bid/105182(cybersecurity@se.com)

https://www.schneider-electric.com/en/download/document/SEVD-2018-235-01/(cybersecurity@se.com)

http://www.securityfocus.com/bid/105182(af854a3a-2127-422b-91ae-364da2661108)

https://www.schneider-electric.com/en/download/document/SEVD-2018-235-01/(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.