CVE-2018-7792

State: Published
Severity: 7.5 High
Published: Aug 29, 2018
Updated: May 29, 2026
Reserved: Mar 8, 2018

Description

A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to decode the password using rainbow table.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	CISA-ADP

Weaknesses

CWE-327 Use of a Broken or Risky Cryptographic Algorithm

Affected Products

Product	Versions
Modicon M221, all references, all versions prior to firmware V1.6.2.0Schneider Electric SE	Modicon M221, all references, all versions prior to firmware V1.6.2.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.