CVE-2018-7794 HIGH

Published: 2020-01-06 | Last Modified: 2026-05-29 | Status: Modified

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.

Additional Descriptions (1)

CWE-754: Existe una vulnerabilidad de Comprobación Inapropiada de Condiciones Inusuales o Excepcionales en Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (véase la notificación de seguridad para versiones específicas) que podría causar una Denegación de Servicio cuando se leen datos con índice no válido usando Modbus TCP.

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	PARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-754
[email protected]	Primary	en CWE-754

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	modicon_m580_firmware	*	<built-in method update of dict object at 0x7e6110cf5600>	Operating System
schneider-electric	modicon_m340_firmware	*	<built-in method update of dict object at 0x7e60e83421c0>	Operating System
schneider-electric	tsxh5744m_firmware	*	<built-in method update of dict object at 0x7e60e8343d80>	Operating System
schneider-electric	tsxh5724m_firmware	*	<built-in method update of dict object at 0x7e60e8342880>	Operating System
schneider-electric	tsxp576634m_firmware	*	<built-in method update of dict object at 0x7e6110cf5dc0>	Operating System
schneider-electric	tsxp57554m_firmware	*	<built-in method update of dict object at 0x7e6110cf74c0>	Operating System
schneider-electric	tsxp575634m_firmware	*	<built-in method update of dict object at 0x7e60e8341100>	Operating System
schneider-electric	tsxp57454m_firmware	*	<built-in method update of dict object at 0x7e6110f05140>	Operating System
schneider-electric	tsxp574634m_firmware	*	<built-in method update of dict object at 0x7e60e8341d80>	Operating System
schneider-electric	tsxp57354m_firmware	*	<built-in method update of dict object at 0x7e6110cf6980>	Operating System
schneider-electric	tsxp573634m_firmware	*	<built-in method update of dict object at 0x7e60e83404c0>	Operating System
schneider-electric	tsxp57304m_firmware	*	<built-in method update of dict object at 0x7e60e8340c40>	Operating System
schneider-electric	tsxp57254m_firmware	*	<built-in method update of dict object at 0x7e60e8340180>	Operating System
schneider-electric	tsxp572634m_firmware	*	<built-in method update of dict object at 0x7e6110f06640>	Operating System
schneider-electric	tsxp57204m_firmware	*	<built-in method update of dict object at 0x7e60e88168c0>	Operating System
schneider-electric	tsxp571634m_firmware	*	<built-in method update of dict object at 0x7e60e8340c80>	Operating System
schneider-electric	tsxp57154m_firmware	*	<built-in method update of dict object at 0x7e60e83410c0>	Operating System
schneider-electric	tsxp57104m_firmware	*	<built-in method update of dict object at 0x7e611206cac0>	Operating System
schneider-electric	140cpu65150_firmware	*	<built-in method update of dict object at 0x7e60a88aff80>	Operating System
schneider-electric	140cpu65160_firmware	*	<built-in method update of dict object at 0x7e60e83412c0>	Operating System
schneider-electric	140cpu65260_firmware	*	<built-in method update of dict object at 0x7e60e83428c0>	Operating System
schneider-electric	140cpu67261_firmware	*	<built-in method update of dict object at 0x7e60e8342d80>	Operating System
schneider-electric	140cpu67060_firmware	*	<built-in method update of dict object at 0x7e60baa37480>	Operating System
schneider-electric	140cpu67160_firmware	*	<built-in method update of dict object at 0x7e60b8100fc0>	Operating System
schneider-electric	140cpu67261_firmware	*	<built-in method update of dict object at 0x7e60b8102c80>	Operating System
schneider-electric	140cpu67260_firmware	*	<built-in method update of dict object at 0x7e61347e4380>	Operating System
schneider-electric	140cpu65860_firmware	*	<built-in method update of dict object at 0x7e60baa35f00>	Operating System
schneider-electric	140cpu67861_firmware	*	<built-in method update of dict object at 0x7e60b81029c0>	Operating System
schneider-electric	140cpu65160s_firmware	*	<built-in method update of dict object at 0x7e60b8100f80>	Operating System
schneider-electric	140cpu67160s_firmware	*	<built-in method update of dict object at 0x7e60b81021c0>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxh5744m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxh5744m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxh5724m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxh5724m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp576634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp576634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57554m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57554m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp575634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp575634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57454m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57454m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp574634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp574634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57354m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57354m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp573634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp573634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57304m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57304m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57254m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57254m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp572634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp572634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57204m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57204m_:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp571634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp571634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57154m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57154m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57104m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57104m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65150_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65150:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65160_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65160:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65260_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65260:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67261_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67261:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67060_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67060:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67160_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67160:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67261_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67261:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67260_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67260:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65860_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65860:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67861_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67861:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65160s_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65160s:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67160s_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67160s:-:::::::*`

References

https://www.se.com/ww/en/download/document/SEVD-2019-344-01
Source: [email protected]

Vendor Advisory
https://www.se.com/ww/en/download/document/SEVD-2019-344-01
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory