High ICSA-18-240-01 3 CVEs

Schneider Electric Modicon M221

Published Aug 28, 2018 · Updated Aug 28, 2018

Vendor: Schneider Electric Product: Modicon M221 all references

Summary

Successful exploitation of these vulnerabilities may allow unauthorized users to replay authentication sequences, overwrite passwords, or decode passwords.

Vulnerabilities 3

Critical 9.8

CVE-2018-7790

An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all …

Schneider Electric Modicon M221, all references, all versions prior to firmware V1.6.2.0 ICS / OT

Aug 29, 2018
Critical 9.8

CVE-2018-7791

A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all re…

Schneider Electric Modicon M221, all references, all versions prior to firmware V1.6.2.0 ICS / OT

Aug 29, 2018
High 7.5

CVE-2018-7792

A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all re…

Schneider Electric Modicon M221, all references, all versions prior to firmware V1.6.2.0 ICS / OT

Aug 29, 2018

Revision history

2018-08-28 #1
ICSA-18-240-01 Schneider Electric Modicon M221

References

ICS Advisory ICSA-18-240-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-240-01
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B