Schneider Electric Modicon M221
view advisory published 2018-11-20
Successful exploitation of this vulnerability could cause a change of IPv4 configuration (IP address, mask, and gateway) when remotely connected to the device.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-7798US | high8.2OT elevated | — | ||
A Insufficient Verification of Data Authenticity (CWE-345) vulnerability exists in the Modicon M221, all versions, which could cause a change of IPv4 configuration (IP address, mas… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationModicon M221
All controllers should reside in locked cabinets and never be left in the “Program” mode.
- FixedModicon M221
Within the Modicon M221 application, users should disable all unused protocols, especially programming protocol, as described in section “Configuring Ethernet Network” of SoMachine Basic online help. This will prevent remote programming of the M221 PLC.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan