high7.5
CVE-2018-7855
A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a D…
Impact
A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service when sending invalid breakpoint parameters to the controller over Modbus
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Modicon Premium Firmware | All versions |
| Schneider-Electric | Modicon Quantum Firmware | All versions |
| Schneider-Electric | Modicon M340 Firmware | before 3.10 |
| Schneider-Electric | Modicon M580 Firmware | before 2.90 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0766
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0767
- https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0766
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0767