Schneider Electric Somachine Basic vulnerabilities

6 CVEs affecting Schneider Electric Somachine Basic, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7489, published 2020-04-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-7489, published 2020-04-22. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming…
CVE-2018-7783, published 2018-07-03. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Schneider Electric SoMachine Basic prior to v1.6 SP1 suffers from an XML External Entity (XXE) vulnerability using the DTD parameter entities technique resulting in disclosure and retrieval of…
CVE-2018-7823, published 2019-05-22. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. A Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause remote launch of SoMachine…
CVE-2018-7821, published 2019-05-22. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause cycle time impact when…
CVE-2018-7798, published 2018-11-02. High severity, CVSS 8.2. EPSS: 0.7% chance of exploitation in the next 30 days. A Insufficient Verification of Data Authenticity (CWE-345) vulnerability exists in the Modicon M221, all versions, which could cause a change of IPv4 configuration (IP address, mask and gateway) when…
CVE-2018-7822, published 2019-05-22. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. An Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause…