CVE-2018-7846
First published: Wed May 22 2019(Updated: )
A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider Electric Modicon M580 Firmware | ||
| Schneider Electric Modicon M580 | ||
| Schneider Electric Modicon M340 Firmware | ||
| Schneider Electric Modicon M340 | ||
| Schneider Electric Modicon Quantum Firmware | ||
| Schneider Electric Modicon Quantum | ||
| Schneider Electric Modicon Premium | ||
| Schneider Electric Modicon Premium |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-7846?
The severity of CVE-2018-7846 is critical with a score of 9.8.
What is the description of CVE-2018-7846?
CVE-2018-7846 is a Trust Boundary Violation vulnerability that allows unauthorized access to the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium controllers through a brute force attack on the Modbus protocol.
Which software versions are affected by CVE-2018-7846?
All versions of Schneider Electric Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium firmware are affected by CVE-2018-7846.
How can the CVE-2018-7846 vulnerability be exploited?
The CVE-2018-7846 vulnerability can be exploited by conducting a brute force attack on the Modbus protocol to gain unauthorized access to the controllers.
Are the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium devices vulnerable to CVE-2018-7846?
Yes, the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium devices are vulnerable to CVE-2018-7846.
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/schneider-electric
- canonical/schneider electric modicon m580 firmware
- canonical/schneider electric modicon m580
- canonical/schneider electric modicon m340 firmware
- canonical/schneider electric modicon m340
- canonical/schneider electric modicon quantum firmware
- canonical/schneider electric modicon quantum
- canonical/schneider electric modicon premium