Description
A Insufficient Verification of Data Authenticity (CWE-345) vulnerability exists in the Modicon M221, all versions, which could cause a change of IPv4 configuration (IP address, mask and gateway) when remotely connected to the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric SE | Modicon M221, All Versions | Modicon M221, All Versions | — |
Advisories 1
- ICSA-18-324-02 Schneider Electric Modicon M221 CISA ICS & IT advisories · Nov 20, 2018