ICSA-18-240-02

icsaUScisa_csaf_ot

Schneider Electric Modicon M221

view advisory published 2018-08-28

Successful exploitation of this vulnerability could allow an unauthorized user to remotely reboot the device.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2018-7789UShigh7.5—
An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0).…
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • MitigationModicon M221

    For more information, see the Schneider Electric security notification at:

    https://www.schneider-electric.com/en/download/document/SEVD-2018-233-01/
  • FixedModicon M221

    Schneider Electric reports that a fix for this vulnerability is implemented in Modicon M221 Firmware v1.6.2.0, delivered within SoMachine Basic v1.6 SP2, or by using the Schneider Electric Software Update tool.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan