CVE-2018-7823

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-05-22 · updated 2026-06-17

Description

A Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause remote launch of SoMachine Basic when sending crafted ethernet message.

Affected products

Modicon M221, all references, all versions: before 1.10.0.0 — fixed in 1.10.0.0
Schneider Electric SE SoMachine Basic: all versions

How to fix

Upgrade to a fixed version: Modicon M221, all references, all versions 1.10.0.0. Check the vendor advisory for mitigations.

References

https://www.schneider-electric.com/en/download/document/SEVD-2019-045-01/
https://www.schneider-electric.com/en/download/document/SEVD-2019-045-01/

Get alerted when CVE-2018-7823 or the next vulnerability affects your stack