Schneider Electric Modicon M221
Successful exploitation of these vulnerabilities may allow unauthorized users to replay authentication sequences, overwrite passwords, or decode passwords.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-7792US | high7.5OT elevated | — | ||
A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulne… | ||||
| CVE-2018-7791US | critical9.8 | — | ||
A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulne… | ||||
| CVE-2018-7790US | critical9.8OT elevated | — | ||
An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allow… | ||||
references
External citations — patches, advisories, analysis.
remediations (3)
- MitigationModicon M221 all references
As a temporary mitigation, Modicon M221 users should take the following measures: Set up a firewall blocking all remote/external access to Port 502.
- MitigationModicon M221 all references
As a temporary mitigation, Modicon M221 users should take the following measures: Set up a firewall blocking all remote/external access to Port 502.
- MitigationModicon M221 all references
As a temporary mitigation, Modicon M221 users should take the following measures: Set up a firewall blocking all remote/external access to Port 502.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan