CVEvulnerability

CVE-2018-7846

9.8 CRITICAL Published 2019-05-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-05-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-668

Description

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller.

Affected configurations

• schneider-electric modicon m580 firmware • schneider-electric modicon m340 firmware • schneider-electric modicon quantum firmware • schneider-electric modicon premium firmware

Related

Weakness · CWE (1)

  • CWE-668 Exposure of Resource to Wrong Sphere weakness

References