CVE-2018-7851

6.5MEDIUM

Key Information:

Vendor
Schneider Electric
Status
Modicon M580 With Firmware Prior To V2.50 Modicon M340 With Firmware Prior To V3.01 Bmxcra312xx With Firmware Prior To V2.40 All Firmware Versions Of Modicon Premium And 140cra312xxx
Vendor
CVE Published:
22 May 2019

Summary

CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could cause a denial of service to the device that would force a restart to restore availability.

Affected Version(s)

Modicon M580 with firmware prior to V2.50 Modicon M340 with firmware prior to V3.01 BMxCRA312xx with firmware prior to V2.40 All firmware of Modicon Premium and 140CRA312xxx Modicon M580 with firmware prior to V2.50 Modicon M340 with firmware prior to V3.01 BMxCRA312xx with firmware prior to V2.40 All firmware versions of Modicon Premium and 140CRA312xxx

References

https://www.schneider-electric.com/en/download/document/S...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.