CVE-2018-7789

7.5 highEPSS 2.8%

High (7.5) in schneider-electric modicon m221 firmware. EPSS 2.8% chance of exploitation in the next 30 days.

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to remotely reboot Modicon M221 using crafted programing protocol frames.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-754
Published: 2018-08-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

schneider-electric:modicon_m221_firmware

References

http://www.securityfocus.com/bid/105171
https://ics-cert.us-cert.gov/advisories/ICSA-18-240-02
https://www.schneider-electric.com/en/download/document/SEVD-2018-233-01/
http://www.securityfocus.com/bid/105171
https://ics-cert.us-cert.gov/advisories/ICSA-18-240-02

Check your stack JSON