What’s Vulnerable › Vulnerabilities

CVE-2018-7821

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-22 · updated 2026-06-17
• Weakness: CWE-770

Description

An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated.

Affected products

• Modicon M221, all references, all versions: before 1.10.0.0 — fixed in 1.10.0.0
• Schneider Electric SE SoMachine Basic: all versions

How to fix

Upgrade to a fixed version: Modicon M221, all references, all versions 1.10.0.0. Check the vendor advisory for mitigations.

References

• https://www.schneider-electric.com/en/download/document/SEVD-2019-045-01/
• https://www.schneider-electric.com/en/download/document/SEVD-2019-045-01/

Get alerted when CVE-2018-7821 or the next vulnerability affects your stack