Schneider-electric Modicon M218 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Schneider-electric Modicon M218 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2020-7487 — CVSS 9.8 (critical): A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on…
• CVE-2020-7488 — CVSS 7.5 (high): A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between…
• CVE-2020-7502 — CVSS 7.5 (high): A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (Firmware version 4.3 and prior), which may cause a…
• CVE-2020-7524 — CVSS 7.5 (high): Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior) which could cause Denial of Service when…
• CVE-2021-22800 — CVSS 7.5 (high): A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is sent to the…