CVEvulnerability

CVE-2018-7853

7.5 HIGH Published 2019-05-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-05-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-754

Description

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid physical memory blocks in the controller over Modbus

Affected configurations

• schneider-electric modicon premium firmware • schneider-electric modicon quantum firmware • schneider-electric modicon m340 firmware (< 3.10) • schneider-electric modicon m580 firmware (< 2.90)

Related

Weakness · CWE (1)

  • CWE-754 Improper Check for Unusual or Exceptional Conditions weakness

References