CVE-2018-7822

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-05-22 · updated 2026-06-17
Weakness: CWE-276

Description

An Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause unauthorized access to SoMachine Basic resource files when logged on the system hosting SoMachine Basic.

Affected products

Modicon M221, all references, all versions: before 1.10.0.0 — fixed in 1.10.0.0
Schneider Electric SE SoMachine Basic: all versions

How to fix

Upgrade to a fixed version: Modicon M221, all references, all versions 1.10.0.0. Check the vendor advisory for mitigations.

References

https://www.schneider-electric.com/en/download/document/SEVD-2019-045-01/
https://www.schneider-electric.com/en/download/document/SEVD-2019-045-01/

Get alerted when CVE-2018-7822 or the next vulnerability affects your stack