CVE-2018-7794: High severity Schneider-electric Modicon M580 Firmware vulnerability
Published Jan 6, 2020
·Updated
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.
Affected Software
116 affected components
Schneider-electric Modicon M580 Firmware<2.80
Schneider-electric Modicon M580
Schneider-electric Modicon M340 Firmware<3.01
Schneider-electric Modicon M340
Schneider-electric Tsxh5744m Firmware<3.20
Schneider-electric Tsxh5744m
Schneider-electric Tsxh5724m Firmware<3.20
Schneider-electric Tsxh5724m
Schneider-electric Tsxp576634m Firmware<3.20
Schneider-electric Tsxp576634m
Schneider-electric Tsxp57554m Firmware<3.20
Schneider-electric Tsxp57554m
Schneider-electric Tsxp575634m Firmware<3.20
Schneider-electric Tsxp575634m
Schneider-electric Tsxp57454m Firmware<3.20
Schneider-electric Tsxp57454m
Schneider-electric Tsxp574634m Firmware<3.20
Schneider-electric Tsxp574634m
Schneider-electric Tsxp57354m Firmware<3.20
Schneider-electric Tsxp57354m
Schneider-electric Tsxp573634m Firmware<3.20
Schneider-electric Tsxp573634m
Schneider-electric Tsxp57304m Firmware<3.20
Schneider-electric Tsxp57304m
Schneider-electric Tsxp57254m Firmware<3.20
Schneider-electric Tsxp57254m
Schneider-electric Tsxp572634m Firmware<3.20
Schneider-electric Tsxp572634m
Schneider-electric Tsxp57204m Firmware<3.20
Schneider-electric Tsxp57204m
Schneider-electric Tsxp571634m Firmware<3.20
Schneider-electric Tsxp571634m
Schneider-electric Tsxp57154m Firmware<3.20
Schneider-electric Tsxp57154m
Schneider-electric Tsxp57104m Firmware<3.20
Schneider-electric Tsxp57104m
Schneider-electric 140cpu65150 Firmware<3.52
Schneider-electric 140cpu65150
Schneider-electric 140cpu65160 Firmware<3.52
Schneider-electric 140cpu65160
Schneider-electric 140cpu65260 Firmware<3.52
Schneider-electric 140cpu65260
Schneider-electric 140cpu67261 Firmware<3.52
Schneider-electric 140cpu67261
Schneider-electric 140cpu67060 Firmware<3.52
Schneider-electric 140cpu67060
Schneider-electric 140cpu67160 Firmware<3.52
Schneider-electric 140cpu67160
Schneider-electric 140cpu67260 Firmware<3.52
Schneider-electric 140cpu67260
Schneider-electric 140cpu65860 Firmware<3.52
Schneider-electric 140cpu65860
Schneider-electric 140cpu67861 Firmware<3.52
Schneider-electric 140cpu67861
Schneider-electric 140cpu65160s Firmware<3.52
Schneider-electric 140cpu65160s
Schneider-electric 140cpu67160s Firmware<3.52
Schneider-electric 140cpu67160s
All of the following
Schneider-electric Modicon M580 Firmware<2.80
Schneider-electric Modicon M580
All of the following
Schneider-electric Modicon M340 Firmware<3.01
Schneider-electric Modicon M340
All of the following
Schneider-electric Tsxh5744m Firmware<3.20
Schneider-electric Tsxh5744m
All of the following
Schneider-electric Tsxh5724m Firmware<3.20
Schneider-electric Tsxh5724m
All of the following
Schneider-electric Tsxp576634m Firmware<3.20
Schneider-electric Tsxp576634m
All of the following
Schneider-electric Tsxp57554m Firmware<3.20
Schneider-electric Tsxp57554m
All of the following
Schneider-electric Tsxp575634m Firmware<3.20
Schneider-electric Tsxp575634m
All of the following
Schneider-electric Tsxp57454m Firmware<3.20
Schneider-electric Tsxp57454m
All of the following
Schneider-electric Tsxp574634m Firmware<3.20
Schneider-electric Tsxp574634m
All of the following
Schneider-electric Tsxp57354m Firmware<3.20
Schneider-electric Tsxp57354m
All of the following
Schneider-electric Tsxp573634m Firmware<3.20
Schneider-electric Tsxp573634m
All of the following
Schneider-electric Tsxp57304m Firmware<3.20
Schneider-electric Tsxp57304m
All of the following
Schneider-electric Tsxp57254m Firmware<3.20
Schneider-electric Tsxp57254m
All of the following
Schneider-electric Tsxp572634m Firmware<3.20
Schneider-electric Tsxp572634m
All of the following
Schneider-electric Tsxp57204m Firmware<3.20
Schneider-electric Tsxp57204m
All of the following
Schneider-electric Tsxp571634m Firmware<3.20
Schneider-electric Tsxp571634m
All of the following
Schneider-electric Tsxp57154m Firmware<3.20
Schneider-electric Tsxp57154m
All of the following
Schneider-electric Tsxp57104m Firmware<3.20
Schneider-electric Tsxp57104m
All of the following
Schneider-electric 140cpu65150 Firmware<3.52
Schneider-electric 140cpu65150
All of the following
Schneider-electric 140cpu65160 Firmware<3.52
Schneider-electric 140cpu65160
All of the following
Schneider-electric 140cpu65260 Firmware<3.52
Schneider-electric 140cpu65260
All of the following
Schneider-electric 140cpu67261 Firmware<3.52
Schneider-electric 140cpu67261
All of the following
Schneider-electric 140cpu67060 Firmware<3.52
Schneider-electric 140cpu67060
All of the following
Schneider-electric 140cpu67160 Firmware<3.52
Schneider-electric 140cpu67160
All of the following
Schneider-electric 140cpu67260 Firmware<3.52
Schneider-electric 140cpu67260
All of the following
Schneider-electric 140cpu65860 Firmware<3.52
Schneider-electric 140cpu65860
All of the following
Schneider-electric 140cpu67861 Firmware<3.52
Schneider-electric 140cpu67861
All of the following
Schneider-electric 140cpu65160s Firmware<3.52
Schneider-electric 140cpu65160s
All of the following
Schneider-electric 140cpu67160s Firmware<3.52
Schneider-electric 140cpu67160s
Event History
Jan 6, 2020
CVE Published
via MITRE·10:57 PM
Data Sourced
via MITRE·10:57 PM
DescriptionWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-7794?
CVE-2018-7794 has a severity rating that could lead to a Denial of Service in affected Schneider Electric devices.
2
How do I fix CVE-2018-7794?
To mitigate CVE-2018-7794, update the firmware of the affected devices to the latest version provided by Schneider Electric.
3
Which devices are impacted by CVE-2018-7794?
CVE-2018-7794 affects various Schneider Electric devices, including Modicon M580, Modicon M340, and others as specified in their security notifications.
4
What causes the CVE-2018-7794 vulnerability?
CVE-2018-7794 is caused by improper checks for unusual or exceptional conditions when reading data with an invalid index using Modbus TCP.
5
Is there a workaround for CVE-2018-7794?
Currently, the recommended action for CVE-2018-7794 is to upgrade to the latest firmware, as no specific workarounds are available.