{"id":"CVE-2018-7822","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-7822","generatedAt":"2026-10-28T23:38:52.657Z","title":"An Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause unauthorized access to SoMachine Basic resource files when…","description":"An Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause unauthorized access to SoMachine Basic resource files when logged on the system hosting SoMachine Basic.","published":"2019-05-22T20:29:01.000Z","lastModified":"2026-06-17T02:03:48.000Z","status":"Modified","sourceIdentifier":"cybersecurity@se.com","cvss":{"version":"3.1","score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-276"],"affected":["schneider-electric/somachine basic","schneider-electric/modicon m221 firmware"],"epss":{"score":0.0031,"percentile":0.2367,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.schneider-electric.com/en/download/document/SEVD-2019-045-01/","tags":["Vendor Advisory"],"source":"cybersecurity@se.com"},{"url":"https://www.schneider-electric.com/en/download/document/SEVD-2019-045-01/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-7822","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}