CVE-2018-7792

A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to decode the password using rainbow table...

CVE-2018-7791

CVE-2018-7791 affects Schneider Electric Modicon M221 PLCs (all references, all versions prior to firmware v1.6.2.0). The vulnerability allows unauthorized users to overwrite the original password, potentially enabling upload of the original PLC program. Mitigation is available in Modicon M221 fi...

CVE-2018-7789

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to remotely reboot Modicon M221 using crafted programing protocol frames...

CVE-2018-7789

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to remotely reboot Modicon M221 using crafted programing protocol frames...

Input validation

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to remotely reboot Modicon M221 using crafted programing protocol frames...

CVE-2018-7789

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to remotely reboot Modicon M221 using crafted programing protocol frames...

CVE-2018-7789

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to remotely reboot Modicon M221 using crafted programing protocol frames...

CVE-2018-7789

Summary: CVE-2018-7789 affects Schneider Electric’s Modicon M221 PLC. The issue is an improper check for unusual or exceptional conditions in all references/versions prior to firmware v1.6.2.0, allowing unauthorized remote reboot via crafted programming protocol frames. Affected software/hardware...

High-Severity Flaws Patched in Schneider Electric Products

Schneider Electric has released fixes for a slew of vulnerabilities that can be exploited remotely in two of its industrial control system products. The two flaws, which exist in Schneider Electric’s power management system, PowerLogic PM5560, and its programmable logic controller, Modicon M221,...

Schneider Electric Modicon M221 Authentication Sequence Replay Vulnerability

The Modicon M221 is a logic controller from Schneider Electric. The Schneider Electric Modicon M221 suffers from an authentication sequence replay vulnerability that can be exploited by an attacker to replay the authentication sequence, which can be used to connect to the Modicon M221 and upload...

Schneider Electric Modicon M221 Privilege Permission and Access Control Vulnerability

The Modicon M221 is a logic controller from Schneider Electric. A privilege-granting and access-control vulnerability exists in the Schneider Electric Modicon M221 with firmware versions lower than 1.6.2.0, which can be exploited by an unauthorized user to overwrite the original password, allowin...

Schneider Electric Modicon M221 Password Decoding Vulnerability

The Modicon M221 is a logic controller from Schneider Electric. A password decoding vulnerability exists in the Schneider Electric Modicon M221 with firmware versions lower than 1.6.2.0, which can be exploited by an unauthorized user to decode passwords using a rainbow table...

CVE-2018-7789: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to remotely reboot Modicon M221 using crafted programing protocol frames...

CVE-2018-7790: Authentication Bypass by Capture-replay

An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a...

CVE-2018-7792: Missing Authorization

A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to decode the password using rainbow table...

CVE-2018-7791: Improper Authentication

A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to overwrite the original password with their password. If an attacker exploits this...

Schneider Electric Modicon M221

1. EXECUTIVE SUMMARY CVSS v3 4.8 ATTENTION: Exploitable remotely Vendor: Schneider Electric Equipment: Modicon M221 Vulnerability: Improper Check for Unusual or Exceptional Conditions 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthorized user to remotely...

Schneider Electric Modicon M221

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Exploitable remotely Vendor: Schneider Electric Equipment: Modicon M221 Vulnerabilities: Information Management Errors, Permissions, Privileges, and Access Controls 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow...

Schneider Electric Modicon TM218LDAE40DRPHN Has Denial of Service Vulnerability

The Schneider Electric Modicon TM218LDAE40DRPHN is a 24/16 PLC from Schneider. A remote control vulnerability exists in the Schneider Electric Modicon TM218LDAE40DRPHN, which can be exploited by an attacker to cause a program crash by cyclically sending a large amount of garbage data to PLC port...

PT-2018-1524

Name of the Vulnerable Software and Affected Versions Modicon M221 versions prior to V1.6.2.0 Description A Permissions, Privileges, and Access Control issue exists, allowing unauthorized users to overwrite the original password with their own. This could enable an attacker to upload the original...