Vulnerability-Lookup

CNVD-2019-06189

Vulnerability from cnvd - Published: 2019-03-06

Title

Schneider Electric Modicon M221认证序列重播漏洞

Description

Modicon M221是Schneider Electric（施耐德电气）推出的一款逻辑控制器。 Schneider Electric Modicon M221存在认证序列重播漏洞，攻击者可利用该漏洞重播认证序列，从而可连接到Modicon M221并从PLC上传原始程序。

Severity

中

Patch Name

Schneider Electric Modicon M221认证序列重播漏洞的补丁

Patch Description

Modicon M221是Schneider Electric（施耐德电气）推出的一款逻辑控制器。 Schneider Electric Modicon M221存在认证序列重播漏洞，攻击者可利用该漏洞重播认证序列，从而可连接到Modicon M221并从PLC上传原始程序。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://www.schneider-electric.com/en/product-range-download/62128-logic-controller---modicon-m221#tabs-top

Reference

https://ics-cert.us-cert.gov/advisories/ICSA-18-240-01

Impacted products

Name
Schneider Electric Modicon M221 <1.6.2.0

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-7790"
    }
  },
  "description": "Modicon M221\u662fSchneider Electric\uff08\u65bd\u8010\u5fb7\u7535\u6c14\uff09\u63a8\u51fa\u7684\u4e00\u6b3e\u903b\u8f91\u63a7\u5236\u5668\u3002\n\nSchneider Electric Modicon M221\u5b58\u5728\u8ba4\u8bc1\u5e8f\u5217\u91cd\u64ad\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u91cd\u64ad\u8ba4\u8bc1\u5e8f\u5217\uff0c\u4ece\u800c\u53ef\u8fde\u63a5\u5230Modicon M221\u5e76\u4ecePLC\u4e0a\u4f20\u539f\u59cb\u7a0b\u5e8f\u3002",
  "discovererName": "Irfan Ahmed, Hyunguk Yoo, Sushma Kalle, and Nehal Ameen",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.schneider-electric.com/en/product-range-download/62128-logic-controller---modicon-m221#tabs-top",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-06189",
  "openTime": "2019-03-06",
  "patchDescription": "Modicon M221\u662fSchneider Electric\uff08\u65bd\u8010\u5fb7\u7535\u6c14\uff09\u63a8\u51fa\u7684\u4e00\u6b3e\u903b\u8f91\u63a7\u5236\u5668\u3002\r\n\r\nSchneider Electric Modicon M221\u5b58\u5728\u8ba4\u8bc1\u5e8f\u5217\u91cd\u64ad\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u91cd\u64ad\u8ba4\u8bc1\u5e8f\u5217\uff0c\u4ece\u800c\u53ef\u8fde\u63a5\u5230Modicon M221\u5e76\u4ecePLC\u4e0a\u4f20\u539f\u59cb\u7a0b\u5e8f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Schneider Electric Modicon M221\u8ba4\u8bc1\u5e8f\u5217\u91cd\u64ad\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Schneider Electric Modicon M221 \u003c1.6.2.0"
  },
  "referenceLink": "https://ics-cert.us-cert.gov/advisories/ICSA-18-240-01",
  "serverity": "\u4e2d",
  "submitTime": "2018-08-29",
  "title": "Schneider Electric Modicon M221\u8ba4\u8bc1\u5e8f\u5217\u91cd\u64ad\u6f0f\u6d1e"
}

CVE-2018-7790 (GCVE-0-2018-7790)

Vulnerability from cvelistv5 – Published: 2018-08-29 21:00 – Updated: 2024-09-16 19:52

Summary

An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a Modicon M221, the attacker can upload the original program from the PLC.

Severity ?

No CVSS data available.

CWE

Information Management Error

Assigner

schneider

References

URL

Tags

	http://www.securityfocus.com/bid/105182	vdb-entryx_refsource_BID
	https://www.schneider-electric.com/en/download/do…	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Schneider Electric SE	Modicon M221, all references, all versions prior to firmware V1.6.2.0	Affected: Modicon M221, all references, all versions prior to firmware V1.6.2.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:37:59.565Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "105182",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105182"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.schneider-electric.com/en/download/document/SEVD-2018-235-01/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Modicon M221, all references, all versions prior to firmware V1.6.2.0",
          "vendor": "Schneider Electric SE",
          "versions": [
            {
              "status": "affected",
              "version": "Modicon M221, all references, all versions prior to firmware V1.6.2.0"
            }
          ]
        }
      ],
      "datePublic": "2018-08-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An Information Management Error vulnerability exists in Schneider Electric\u0027s Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a Modicon M221, the attacker can upload the original program from the PLC."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Management Error",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-08-31T09:57:01",
        "orgId": "076d1eb6-cfab-4401-b34d-6dfc2a413bdb",
        "shortName": "schneider"
      },
      "references": [
        {
          "name": "105182",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105182"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.schneider-electric.com/en/download/document/SEVD-2018-235-01/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cybersecurity@schneider-electric.com",
          "DATE_PUBLIC": "2018-08-22T00:00:00",
          "ID": "CVE-2018-7790",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Modicon M221, all references, all versions prior to firmware V1.6.2.0",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Modicon M221, all references, all versions prior to firmware V1.6.2.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Schneider Electric SE"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An Information Management Error vulnerability exists in Schneider Electric\u0027s Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a Modicon M221, the attacker can upload the original program from the PLC."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Management Error"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "105182",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105182"
            },
            {
              "name": "https://www.schneider-electric.com/en/download/document/SEVD-2018-235-01/",
              "refsource": "CONFIRM",
              "url": "https://www.schneider-electric.com/en/download/document/SEVD-2018-235-01/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "076d1eb6-cfab-4401-b34d-6dfc2a413bdb",
    "assignerShortName": "schneider",
    "cveId": "CVE-2018-7790",
    "datePublished": "2018-08-29T21:00:00Z",
    "dateReserved": "2018-03-08T00:00:00",
    "dateUpdated": "2024-09-16T19:52:22.431Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2019-06189

CVE-2018-7790 (GCVE-0-2018-7790)

Tags

Sightings

Nomenclature