GCVE - cpe:2.3:h:schneider-electric:modicon_m218:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:schneider-electric:modicon_m218:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Schneider Electric (`e6a779d5-aeb8-5b94-be36-761d5c05741c`)
Product	Modicon M218 (`d4592803-d053-5ada-a2b9-0faba1cdfb40`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-22800`	not_vulnerable	2026-06-08 05:30:01.466005	Details available A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is sent to the controller over network port 1105/TCP. Affected Product: Modicon M218 Logic Controller (V5.1.0.6 and prior) Published: 2022-02-11T17:40:39.000Z Updated: 2024-08-03T18:51:07.441Z Open on db.gcve.eu Reference links https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-285-04	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-7524`	not_vulnerable	2026-06-08 05:27:13.368968	Details available Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior) which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending a specific IPv4 protocol package to Schneider Electric Modicon M218 Logic Controller can cause IPv4 devices to go down. The device does not work properly and must be powered back on to return to normal. Published: 2020-08-31T16:12:25.000Z Updated: 2024-08-04T09:33:19.475Z Open on db.gcve.eu Reference links https://www.se.com/ww/en/download/document/SEVD-2020-224-03/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-7502`	not_vulnerable	2026-06-08 05:27:13.342348	Details available A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (Firmware version 4.3 and prior), which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller. Published: 2020-06-16T19:41:18.000Z Updated: 2024-08-04T09:33:19.594Z Open on db.gcve.eu Reference links https://www.se.com/ww/en/download/document/SEVD-2020-161-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-7488`	not_vulnerable	2026-06-08 05:27:13.284655	Details available A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers. Published: 2020-04-22T18:51:26.000Z Updated: 2026-05-28T20:29:31.517Z Open on db.gcve.eu Reference links https://www.se.com/ww/en/download/document/SEVD-2020-105-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-7487`	not_vulnerable	2026-06-08 05:27:13.278497	Details available A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers. Published: 2020-04-22T18:50:25.000Z Updated: 2024-08-04T09:33:18.793Z Open on db.gcve.eu Reference links https://www.se.com/ww/en/download/document/SEVD-2020-105-02	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.