CVE-2018-7838 HIGH

Published: 2019-07-15 | Last Modified: 2026-06-17 | Status: Modified

Description

A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FTP CWD command with a data length greater than 1020 bytes. A power cycle is then needed to reactivate the FTP service.

Additional Descriptions (1)

Una CWE-119: Existe una vulnerabilidad de Errores de Búfer en la CPU M580 - BMEP582040 de Modicon , todas las versiones anteriores a la V2.90, y el módulo Ethernet BMENOC0301 de Modicon, todas las versiones anteriores a la V2.16, lo que podría causar la denegación de servicio en el servicio FTP del controlador o Módulo Ethernet BMENOC cuando recibe un comando CWD de FTP con una longitud de datos superior a 1020 bytes. Se necesita entonces un ciclo de energía para reactivar el servicio FTP.

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 7.8 (HIGH)

AV:N/AC:L/Au:N/C:N/I:N/A:C

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	COMPLETE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 6.9

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-119
[email protected]	Primary	en CWE-119

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	bmenoc0301_firmware	*	<built-in method update of dict object at 0x7e610746a780>	Operating System
schneider-electric	modicon_m580_bmep584040_firmware	*	<built-in method update of dict object at 0x7e60a87b58c0>	Operating System
schneider-electric	modicon_m580_bmep586040_firmware	*	<built-in method update of dict object at 0x7e613c341340>	Operating System
schneider-electric	bmeh586040_firmware	*	<built-in method update of dict object at 0x7e61123033c0>	Operating System
schneider-electric	modicon_m580_bmep581020_firmware	*	<built-in method update of dict object at 0x7e610746ab80>	Operating System
schneider-electric	modicon_m580_bmep582020_firmware	*	<built-in method update of dict object at 0x7e61342e7b80>	Operating System
schneider-electric	modicon_m580_bmep582040_firmware	*	<built-in method update of dict object at 0x7e61342e6c00>	Operating System
schneider-electric	modicon_m580_bmep583020_firmware	*	<built-in method update of dict object at 0x7e610746a3c0>	Operating System
schneider-electric	modicon_m580_bmep583040_firmware	*	<built-in method update of dict object at 0x7e613c393340>	Operating System
schneider-electric	modicon_m580_bmep584020_firmware	*	<built-in method update of dict object at 0x7e6107469240>	Operating System
schneider-electric	modicon_m580_bmep585040_firmware	*	<built-in method update of dict object at 0x7e61342e5a80>	Operating System
schneider-electric	modicon_m580_bmep582040s_firmware	*	<built-in method update of dict object at 0x7e61342e4340>	Operating System
schneider-electric	bmeh582040_firmware	*	<built-in method update of dict object at 0x7e60a87b5e00>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:bmenoc0301_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmenoc0301:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep584040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmeh584040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:bmeh584040c:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep584040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep584040s:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep586040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep586040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep586040c:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:bmeh586040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmeh586040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:bmeh586040c:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep581020_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep581020:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep581020h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep582020_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep582020:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep582020h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep582040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep582040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep582040h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep583020_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep583020:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep583040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep583040:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep584020_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep584020:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep585040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep585040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep585040c:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep582040s_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep582040s:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:bmeh582040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmeh582040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:bmeh582040c:-:::::::*`

References

https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-03
Source: [email protected]

Vendor Advisory
https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-03
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory