NetSight
IP …
critical9.8

CVE-2018-7842

A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which…

Impact

A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause an elevation of privilege by conducting a brute force attack on Modbus parameters sent to the controller.

Affected products

VendorProductAffected versions
Schneider-ElectricModicon M580 Firmware
All versions
Schneider-ElectricModicon M340 Firmware
All versions
Schneider-ElectricModicon Quantum Firmware
All versions
Schneider-ElectricModicon Premium Firmware
All versions

Weakness classification

CWE-290

References