CVE-2018-7821

CVSS 7.5 HIGHEPSS 1.1%CWE-400

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.5EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

22 May 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

n/a · SoMachine Basic and Modicon M221, SoMachine Basic, all versions Modicon M221, all references, all versions prior to firmware V1.10.0.0

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.schneider-electric.com/en/download/document/SEVD-2019-045-01/