{"id":"CVE-2018-7821","aliases":["EUVD-2018-19533","GHSA-cr3f-ppw7-pmqf"],"status":"published","title":"An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221...","description":"An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01096,"percentile":0.65803,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400","CWE-770"],"published":"2019-05-22T19:36:47Z","modified":"2026-06-17T02:03:47Z","products":[{"vendor":"schneider-electric","product":"modicon_m221_firmware"},{"vendor":"schneider-electric","product":"somachine_basic"}],"references":[{"url":"https://www.schneider-electric.com/en/download/document/SEVD-2019-045-01/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7821"},{"url":"https://www.schneider-electric.com/en/download/document/SEVD-2019-045-01"},{"url":"https://github.com/advisories/GHSA-cr3f-ppw7-pmqf"}],"sources":{"cve":[{"id":"CVE-2018-7821","description":"An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated.","status":"published","published":"2019-05-22T19:36:47Z","modified":"2026-05-29T14:12:29.726Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:35:10.313768Z"}],"euvd":[{"id":"EUVD-2018-19533","description":"An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated.","status":"published","published":"2019-05-22T19:36:47Z","modified":"2026-05-29T14:12:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:21:01.215325Z"}],"ghsa":[{"id":"GHSA-cr3f-ppw7-pmqf","title":"An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221...","description":"An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated.","status":"published","published":"2022-05-24T16:46:11Z","modified":"2026-05-29T15:31:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-770"],"updated_at":"2026-11-02T15:08:22.826978Z"}],"nvd":[{"id":"CVE-2018-7821","description":"An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated.","status":"published","published":"2019-05-22T20:29:01.043Z","modified":"2026-06-17T02:03:47.717Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-770","CWE-400"],"updated_at":"2026-11-02T14:04:57.307075Z"}]}}