CVE-2018-7857: High severity modicon premium firmware vulnerability
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-7857?
CVE-2018-7857 is a vulnerability that exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus.
Which software versions are affected by CVE-2018-7857?
CVE-2018-7857 affects all versions of Schneider-electric Modicon Premium Firmware up to version 3.20, Modicon Quantum Firmware up to version 3.60, Modicon M340 Firmware up to version 3.01, and Modicon M580 Firmware up to version 2.80.
What is the severity of CVE-2018-7857?
CVE-2018-7857 has a severity rating of 7.5 (high).
How can CVE-2018-7857 be exploited?
CVE-2018-7857 can be exploited by writing out of bounds variables to the controller over Modbus.
How can I fix CVE-2018-7857?
To fix CVE-2018-7857, update the affected products to the latest firmware version provided by Schneider-electric.