CVE-2018-7851 MEDIUM

Published: 2019-05-22 | Last Modified: 2026-06-17 | Status: Modified

Description

CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could cause a denial of service to the device that would force a restart to restore availability.

Additional Descriptions (1)

CWE-119: Existe una vulnerabilidad de errores de búfer en Modicon M580 con firmware anterior a V2.50, Modicon M340 con firmware anterior a V3.01, BMxCRA312xx con firmware anterior a V2.40 y todas las versiones de firmware de Modicon Premium y 140CRA312xxx al enviar un paquete Modbus especialmente creado, que podría generar una Denegación de Servicio al dispositivo que forzaría un reinicio para restaurar la disponibilidad.

CVSS Metrics

Base Score: 6.5 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	LOW
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 2.8

Impact Score: 3.6

Base Score: 6.8 (MEDIUM)

AV:N/AC:L/Au:S/C:N/I:N/A:C

Access Vector	NETWORK
Access Complexity	LOW
Authentication	SINGLE
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	COMPLETE

Source: [email protected]

Type: Primary

Exploitability Score: 8.0

Impact Score: 6.9

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-119
[email protected]	Primary	en CWE-119

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	m580_firmware	*	<built-in method update of dict object at 0x7e6111c1f640>	Operating System
schneider-electric	m340_firmware	*	<built-in method update of dict object at 0x7e60bb884100>	Operating System
schneider-electric	bmx\/e_cra_firmware	*	<built-in method update of dict object at 0x7e6112393240>	Operating System
schneider-electric	modicon_premium_firmware	*	<built-in method update of dict object at 0x7e60bb887740>	Operating System
schneider-electric	140cra312xxx_firmware	*	<built-in method update of dict object at 0x7e6111c1f140>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:m580_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmeh582040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:bmeh582040c:-:::::::*`
No	`cpe:2.3:h:schneider-electric:bmeh584040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:bmeh584040c:-:::::::*`
No	`cpe:2.3:h:schneider-electric:bmeh586040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:bmeh586040c:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep581020:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep581020h:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep582020:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep582020h:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep582040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep582040h:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep582040s:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep583020:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep583040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep584020:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep584040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep584040s:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep585040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep585040c:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep586040:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep586040c:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:m340_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000h:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp342000:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420102:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420102cl:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020h:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302cl:-:::::::*`
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:bmx\/e_cra_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmxcra31200:-:::::::*`
No	`cpe:2.3:h:schneider-electric:bmxcra31210c:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_premium_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_premium:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cra312xxx_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cra312xxx:-:::::::*`

References

https://www.schneider-electric.com/en/download/document/SEVD-2019-134-10/
Source: [email protected]

Vendor Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2019-134-10/
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory