CVEvulnerability

CVE-2018-7848

7.5 HIGH Published 2019-05-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-05-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading files from the controller over Modbus

Affected configurations

• schneider-electric modicon m580 firmware (< 2.90) • schneider-electric modicon m340 firmware (< 3.10) • schneider-electric modicon quantum firmware • schneider-electric modicon premium firmware

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References