CVE-2018-7853 HIGH

Published: 2019-05-22 | Last Modified: 2026-06-17 | Status: Modified

Description

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid physical memory blocks in the controller over Modbus

Additional Descriptions (1)

Una CWE-248: Existe una vulnerabilidad de Excepción no Detectada en todas las versiones de Modicon M580, Modicon M340, Modicon Quantum y Modicon Premium, que podría generar una Denegación de Servicio cuando se leen bloques de memoria física no válidos en el controlador sobre protocolo Modbus.

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	PARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Primary	en CWE-754

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	modicon_premium_firmware	-	<built-in method update of dict object at 0x7e60bbd60e80>	Operating System
schneider-electric	modicon_quantum_firmware	-	<built-in method update of dict object at 0x7e60bbd62900>	Operating System
schneider-electric	modicon_m340_firmware	*	<built-in method update of dict object at 0x7e60a8a69c00>	Operating System
schneider-electric	modicon_m580_firmware	*	<built-in method update of dict object at 0x7e60e8877a00>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_premium_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_premium:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_quantum_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_quantum:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580:-:::::::*`

References

https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
Source: [email protected]

Mitigation Vendor Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0764
Source: [email protected]

Exploit Third Party Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
Source: af854a3a-2127-422b-91ae-364da2661108

Mitigation Vendor Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0764
Source: af854a3a-2127-422b-91ae-364da2661108

Exploit Third Party Advisory