VULNERABILITY INTELLIGENCE

CVE-2018-7792

CVSS score7.5 HIGH

EPSS probability1.05%

CISA KEVNot currently listed

Published2018-08-29

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to decode the password using rainbow table.

Weakness classification

CWE-327: Use of a Broken or Risky Cryptographic Algorithm
CWE-862: Missing Authorization

Primary references

cybersecurity@se.com — Third Party Advisory, VDB Entry
cybersecurity@se.com — Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory