NetSight
high7.5

CVE-2018-7848

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause …

Impact

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading files from the controller over Modbus

Affected products

VendorProductAffected versions
Schneider-ElectricModicon M580 Firmware
before 2.90
Schneider-ElectricModicon M340 Firmware
before 3.10
Schneider-ElectricModicon Quantum Firmware
All versions
Schneider-ElectricModicon Premium Firmware
All versions

Weakness classification

References