high7.5
CVE-2018-7854
A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a d…
Impact
A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a denial of Service when sending invalid debug parameters to the controller over Modbus.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Modicon Premium Firmware | All versions |
| Schneider-Electric | Modicon Quantum Firmware | All versions |
| Schneider-Electric | Modicon M340 Firmware | before 3.10 |
| Schneider-Electric | Modicon M580 Firmware | before 2.90 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0765
- https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0765