CVE-2018-7851: Buffer Overflow
First published: Wed May 22 2019(Updated: )
CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could cause a denial of service to the device that would force a restart to restore availability.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider Electric Modicon M580 Firmware | <2.50 | |
| Schneider Electric BMEH582040 Firmware | ||
| Schneider Electric BMEH582040C | ||
| Schneider Electric BMEH584040 | ||
| Schneider Electric BMEH584040C | ||
| Schneider Electric BMEH586040 | ||
| schneider-electric bmeh586040c | ||
| Schneider Electric Modicon M580 BMEP581020 | ||
| schneider-electric Modicon M580 BMEP581020H firmware | ||
| Modicon M580 | ||
| Modicon M580 | ||
| schneider-electric Modicon M580 | ||
| schneider-electric Modicon M580 | ||
| Schneider Electric Modicon M580 BMEP582040S | ||
| Schneider Electric Modicon M580 BMEP583020 | ||
| Schneider Electric Modicon M580 BMEP583040 | ||
| Schneider Electric Modicon M580 BMEP584020 Firmware | ||
| Schneider Electric Modicon M580 BMEP584040 Firmware | ||
| Schneider Electric Modicon M580 BMEP584040S Firmware | ||
| schneider-electric Modicon M580 BMEP585040C Firmware | ||
| schneider-electric Modicon M580 BMEP585040C Firmware | ||
| schneider-electric modicon m580 bmep586040 firmware | ||
| schneider-electric Modicon M580 bmep586040c firmware | ||
| Schneider Electric Modicon M340 Firmware | <3.01 | |
| Schneider Electric BMXP341000 Firmware | ||
| Schneider Electric BMXP341000H Firmware | ||
| Schneider Electric BMXP342000 Firmware | ||
| Schneider Electric BMXP3420102 Firmware | ||
| Schneider Electric BMXP3420102CL | ||
| schneider-electric BMXP342020H firmware | ||
| schneider-electric BMXP342020H firmware | ||
| Schneider Electric BMXP3420302H firmware | ||
| Schneider Electric BMXP3420302CL Firmware | ||
| Schneider Electric BMXP3420302H firmware | ||
| Schneider Electric BMX/E CRA Firmware | <2.40 | |
| Schneider Electric BMXCRA31200 | ||
| Schneider Electric BMxCRA31210C | ||
| Schneider Electric Modicon Premium | ||
| Schneider Electric Modicon Premium | ||
| Schneider Electric 140CRA312xxx Firmware | ||
| Schneider Electric Modicon 140CRA312xxx | ||
| All of | ||
| Schneider Electric Modicon M580 Firmware | <2.50 | |
| Any of | ||
| Schneider Electric BMEH582040 Firmware | ||
| Schneider Electric BMEH582040C | ||
| Schneider Electric BMEH584040 | ||
| Schneider Electric BMEH584040C | ||
| Schneider Electric BMEH586040 | ||
| schneider-electric bmeh586040c | ||
| Schneider Electric Modicon M580 BMEP581020 | ||
| schneider-electric Modicon M580 BMEP581020H firmware | ||
| Modicon M580 | ||
| Modicon M580 | ||
| schneider-electric Modicon M580 | ||
| schneider-electric Modicon M580 | ||
| Schneider Electric Modicon M580 BMEP582040S | ||
| Schneider Electric Modicon M580 BMEP583020 | ||
| Schneider Electric Modicon M580 BMEP583040 | ||
| Schneider Electric Modicon M580 BMEP584020 Firmware | ||
| Schneider Electric Modicon M580 BMEP584040 Firmware | ||
| Schneider Electric Modicon M580 BMEP584040S Firmware | ||
| schneider-electric Modicon M580 BMEP585040C Firmware | ||
| schneider-electric Modicon M580 BMEP585040C Firmware | ||
| schneider-electric modicon m580 bmep586040 firmware | ||
| schneider-electric Modicon M580 bmep586040c firmware | ||
| All of | ||
| Schneider Electric Modicon M340 Firmware | <3.01 | |
| Any of | ||
| Schneider Electric Modicon M340 BMXP341000 | ||
| Schneider Electric Modicon M340 BMXP341000H | ||
| Schneider Electric Modicon M340 BMXP342000 Firmware | ||
| Schneider Electric Modicon M340 BMXP3420102 | ||
| Schneider Electric Modicon M340 BMXP3420102CL Firmware | ||
| Schneider Electric Modicon M340 BMXP342020 | ||
| Schneider Electric Modicon M340 BMXP342020H | ||
| Schneider Electric Modicon M340 BMXP3420302 Firmware | ||
| Schneider Electric Modicon M340 BMXP3420302CL | ||
| Schneider Electric Modicon M340 BMXP3420302H Firmware | ||
| All of | ||
| Schneider Electric BMX/E CRA Firmware | <2.40 | |
| Any of | ||
| Schneider Electric BMXCRA31200 | ||
| Schneider Electric BMxCRA31210C | ||
| All of | ||
| Schneider Electric Modicon Premium | ||
| Schneider Electric Modicon Premium | ||
| All of | ||
| Schneider Electric 140CRA312xxx Firmware | ||
| Schneider Electric Modicon 140CRA312xxx |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-7851.
What is the severity of CVE-2018-7851?
The severity of CVE-2018-7851 is medium with a CVSS score of 6.5.
Which software is affected by CVE-2018-7851?
CVE-2018-7851 affects Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, and all firmware versions of Modicon Premium and 140CRA312xxx.
How can I fix CVE-2018-7851?
To fix CVE-2018-7851, it is recommended to update the firmware of the affected devices to V2.50 or later for Modicon M580, V3.01 or later for Modicon M340, V2.40 or later for BMxCRA312xx, and the latest version available for Modicon Premium and 140CRA312xxx.
Where can I find more information about CVE-2018-7851?
You can find more information about CVE-2018-7851 in the Schneider Electric Security Advisory SEVD-2019-134-10.
- agent/type
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/schneider-electric
- canonical/schneider electric modicon m580 firmware
- canonical/schneider electric bmeh582040 firmware
- canonical/schneider electric bmeh582040c
- canonical/schneider electric bmeh584040
- canonical/schneider electric bmeh584040c
- canonical/schneider electric bmeh586040
- canonical/schneider-electric bmeh586040c
- canonical/schneider electric modicon m580 bmep581020
- canonical/schneider-electric modicon m580 bmep581020h firmware
- canonical/modicon m580
- canonical/schneider-electric modicon m580
- canonical/schneider electric modicon m580 bmep582040s
- canonical/schneider electric modicon m580 bmep583020
- canonical/schneider electric modicon m580 bmep583040
- canonical/schneider electric modicon m580 bmep584020 firmware
- canonical/schneider electric modicon m580 bmep584040 firmware
- canonical/schneider electric modicon m580 bmep584040s firmware
- canonical/schneider-electric modicon m580 bmep585040c firmware
- canonical/schneider-electric modicon m580 bmep586040 firmware
- canonical/schneider-electric modicon m580 bmep586040c firmware
- canonical/schneider electric modicon m340 firmware
- canonical/schneider electric bmxp341000 firmware
- canonical/schneider electric bmxp341000h firmware
- canonical/schneider electric bmxp342000 firmware
- canonical/schneider electric bmxp3420102 firmware
- canonical/schneider electric bmxp3420102cl
- canonical/schneider-electric bmxp342020h firmware
- canonical/schneider electric bmxp3420302h firmware
- canonical/schneider electric bmxp3420302cl firmware
- canonical/schneider electric bmx/e cra firmware
- canonical/schneider electric bmxcra31200
- canonical/schneider electric bmxcra31210c
- canonical/schneider electric modicon premium
- canonical/schneider electric 140cra312xxx firmware
- canonical/schneider electric modicon 140cra312xxx
- canonical/schneider electric modicon m340 bmxp341000
- canonical/schneider electric modicon m340 bmxp341000h
- canonical/schneider electric modicon m340 bmxp342000 firmware
- canonical/schneider electric modicon m340 bmxp3420102
- canonical/schneider electric modicon m340 bmxp3420102cl firmware
- canonical/schneider electric modicon m340 bmxp342020
- canonical/schneider electric modicon m340 bmxp342020h
- canonical/schneider electric modicon m340 bmxp3420302 firmware
- canonical/schneider electric modicon m340 bmxp3420302cl
- canonical/schneider electric modicon m340 bmxp3420302h firmware