CVE-2018-7852
First published: Wed May 22 2019(Updated: )
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when an invalid private command parameter is sent to the controller over Modbus.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Modicon M580 Firmware | ||
| Schneider-electric Modicon M580 | ||
| Schneider-electric Modicon M340 Firmware | ||
| Schneider-electric Modicon M340 | ||
| Schneider-electric Modicon Quantum Firmware | ||
| Schneider-electric Modicon Quantum | ||
| Schneider-electric Modicon Premium Firmware | ||
| Schneider-electric Modicon Premium |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-7852?
CVE-2018-7852 is a vulnerability known as Uncaught Exception vulnerability that exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium.
What is the severity of CVE-2018-7852?
The severity of CVE-2018-7852 is high with a CVSS score of 7.5.
What software is affected by CVE-2018-7852?
CVE-2018-7852 affects the Modicon M580 Firmware, Modicon M340 Firmware, Modicon Quantum Firmware, and Modicon Premium Firmware.
How can CVE-2018-7852 be exploited?
CVE-2018-7852 can be exploited by sending an invalid private command parameter to the controller over Modbus, causing a denial of service.
Are the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium vulnerable to CVE-2018-7852?
Yes, all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium are vulnerable to CVE-2018-7852.
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/description
- agent/tags
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- vendor/schneider-electric
- canonical/schneider-electric modicon m580 firmware
- canonical/schneider-electric modicon m580
- canonical/schneider-electric modicon m340 firmware
- canonical/schneider-electric modicon m340
- canonical/schneider-electric modicon quantum firmware
- canonical/schneider-electric modicon quantum
- canonical/schneider-electric modicon premium firmware
- canonical/schneider-electric modicon premium