[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYJfx6uELmEtieJCyqkZDiZQtnqX2ffEAcQ05QGfLhHU":3,"g5a-risk:CVE-2018-7790":121},{"success":4,"data":5,"meta":119},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":52,"references":53,"referencesCount":52,"weaknesses":66,"weaknessesCount":75,"isActivelyExploited":76,"cisaInfo":27,"otxData":27,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":117,"notableEvents":118},"CVE-2018-7790","What is CVE-2018-7790?","An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a Modicon M221, the attacker can upload the original program from the PLC.","An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). ...","2018-08-29T21:29:01.07","2022-02-03T14:31:24.807",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.02478,[39,39,39,39,39,39,39],"Critical",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"schneider-electric","modicon_m221_firmware","*","cpe:2.3:o:schneider-electric:modicon_m221_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"modicon_m221","-","cpe:2.3:h:schneider-electric:modicon_m221:-:*:*:*:*:*:*:*",2,[54,60],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F105182","Securityfocus",[58,59],"Third Party Advisory","VDB Entry",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwww.schneider-electric.com\u002Fen\u002Fdownload\u002Fdocument\u002FSEVD-2018-235-01\u002F","Schneider-electric",[64,65],"Mitigation","Vendor Advisory",[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-294","Authentication Bypass by Capture-replay","A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).","Capture-replay attacks are common and can be difficult to defeat without cryptography. They are a subset of network injection attacks that rely on observing previously-sent valid commands, then changing them slightly if necessary and resending the same commands to the server.","Incomplete","Base","Simple",1,false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2018-7790? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-7790, a critical severity cyber security vulnerability from 2018. An Information Management Error vulnerability exists in ...","CVE-2018-7790, CVE-2018-7790 vulnerability, CVE-2018-7790 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, schneider-electric security, modicon_m221_firmware vulnerability, modicon_m221 vulnerability","\u002Fwhat-is\u002Fcve-2018-7790",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-7790","Cybersecurity","CVE-2018-7790, CVE-2018-7790 vulnerability, CVE-2018-7790 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":105,"Negate":27,"Nodes":106},"AND",[107,113],{"Operator":108,"Negate":27,"CPEMatch":109},"OR",[110],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":111,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":112,"VersionEndIncluding":27},"55D26878-E5EB-4537-A252-34B3EBB758CC","1.6.2.0",{"Operator":108,"Negate":27,"CPEMatch":114},[115],{"Vulnerable":27,"Criteria":51,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BB0D83F4-B718-47AB-AFB8-B576CB138AAC",[],[],{"lastModified":11,"cacheTime":120,"version":33},1792494043133,{"score":122,"band":123,"action":124,"scoredAt":125},54,"Medium","Plan remediation","2026-10-20T06:41:17.259054+00:00"]