CVE-2018-7852: High severity Schneider-electric Modicon M580 Firmware vulnerability
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when an invalid private command parameter is sent to the controller over Modbus.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-7852?
CVE-2018-7852 is a vulnerability known as Uncaught Exception vulnerability that exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium.
What is the severity of CVE-2018-7852?
The severity of CVE-2018-7852 is high with a CVSS score of 7.5.
What software is affected by CVE-2018-7852?
CVE-2018-7852 affects the Modicon M580 Firmware, Modicon M340 Firmware, Modicon Quantum Firmware, and Modicon Premium Firmware.
How can CVE-2018-7852 be exploited?
CVE-2018-7852 can be exploited by sending an invalid private command parameter to the controller over Modbus, causing a denial of service.
Are the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium vulnerable to CVE-2018-7852?
Yes, all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium are vulnerable to CVE-2018-7852.