CVE-2018-7790: schneider electric se modicon m221, all references, all versions prior to firmware v1.6.2.0 Authentication Bypass by Capture-replay

Vulnerability summary

CVE-2018-7790 is a critical (CVSS 9.8) Authentication Bypass by Capture-replay vulnerability in schneider electric se modicon m221, all references, all versions prior to firmware v1.6.2.0. EPSS estimates a 2.48% chance of exploitation in the next 30 days, higher than 84.3% of scored vulnerabilities.

Timeline

1. 29-08-2018
   PublishedVulnerability first disclosed.
2. 29-05-2026
   Last modifiedVulnerability information updated.

Description

An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a Modicon M221, the attacker can upload the original program from the PLC.

• CWE-294Authentication Bypass by Capture-replayA capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).