CVE-2018-7836: Schneider Electric Iiot Monitor

Critical severity, CVSS 9.8. EPSS: 32% chance of exploitation in the next 30 days.

An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow upload and execution of malicious files.

Affected products

• Schneider Electric Iiot Monitor: version 3.1.38 only

Published 2018-12-24. Last modified 2026-06-17.