CVE-2020-7537
First published: Fri Dec 11 2020(Updated: )
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.
Credit: cybersecurity@se.com cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Modicon M580 Bmep584040 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep584040 | ||
| Schneider-electric Modicon M580 Bmep582040 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep582040 | ||
| Schneider-electric Modicon M580 Bmep586040 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep586040 | ||
| Schneider-electric Modicon M580 Bmep585040 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep585040 | ||
| Schneider-electric Modicon M580 Bmep582020 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep582020 | ||
| Schneider-electric Modicon M580 Bmep581020 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep581020 | ||
| Schneider-electric Modicon M580 Bmep584020 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep584020 | ||
| Schneider-electric Modicon M580 Bmep583040 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep583040 | ||
| Schneider-electric Modicon M580 Bmep583020 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep583020 | ||
| Schneider-electric Bmxp341000 Firmware | <3.30 | |
| Schneider-electric Bmxp341000 | ||
| Schneider-electric Bmxp342000 Firmware | <3.30 | |
| Schneider-electric Bmxp342000 | ||
| Schneider-electric Bmxp3420102 Firmware | <3.30 | |
| Schneider-electric Bmxp3420102 | ||
| Schneider-electric Bmxp3420102cl Firmware | <3.30 | |
| Schneider-electric Bmxp3420102cl | ||
| Schneider-electric Bmxp342020 Firmware | <3.30 | |
| Schneider-electric Bmxp342020 | ||
| Schneider-electric Bmxp3420302 Firmware | <3.30 | |
| Schneider-electric Bmxp3420302 | ||
| Schneider-electric Bmxp3420302cl Firmware | <3.30 | |
| Schneider-electric Bmxp3420302cl | ||
| Schneider-electric Tsxp574634 Firmware | ||
| Schneider-electric Tsxp574634 | ||
| Schneider-electric Tsxp575634 Firmware | ||
| Schneider-electric Tsxp575634 | ||
| Schneider-electric Tsxp576634 Firmware | ||
| Schneider-electric Tsxp576634 | ||
| All of | ||
| Schneider-electric Modicon M580 Bmep584040 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep584040 | ||
| All of | ||
| Schneider-electric Modicon M580 Bmep582040 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep582040 | ||
| All of | ||
| Schneider-electric Modicon M580 Bmep586040 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep586040 | ||
| All of | ||
| Schneider-electric Modicon M580 Bmep585040 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep585040 | ||
| All of | ||
| Schneider-electric Modicon M580 Bmep582020 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep582020 | ||
| All of | ||
| Schneider-electric Modicon M580 Bmep581020 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep581020 | ||
| All of | ||
| Schneider-electric Modicon M580 Bmep584020 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep584020 | ||
| All of | ||
| Schneider-electric Modicon M580 Bmep583040 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep583040 | ||
| All of | ||
| Schneider-electric Modicon M580 Bmep583020 Firmware | <3.20 | |
| Schneider-electric Modicon M580 Bmep583020 | ||
| All of | ||
| Schneider-electric Modicon M340 Bmxp341000 Firmware | <3.30 | |
| Schneider-electric Modicon M340 Bmxp341000 | ||
| All of | ||
| Schneider-electric Modicon M340 Bmxp342000 Firmware | <3.30 | |
| Schneider-electric Modicon M340 Bmxp342000 | ||
| All of | ||
| Schneider-electric Modicon M340 Bmxp3420102 Firmware | <3.30 | |
| Schneider-electric Modicon M340 Bmxp3420102 | ||
| All of | ||
| Schneider-electric Modicon M340 Bmxp3420102cl Firmware | <3.30 | |
| Schneider-electric Modicon M340 Bmxp3420102cl | ||
| All of | ||
| Schneider-electric Modicon M340 Bmxp342020 Firmware | <3.30 | |
| Schneider-electric Modicon M340 Bmxp342020 | ||
| All of | ||
| Schneider-electric Modicon M340 Bmxp3420302 Firmware | <3.30 | |
| Schneider-electric Modicon M340 Bmxp3420302 | ||
| All of | ||
| Schneider-electric Modicon M340 Bmxp3420302cl Firmware | <3.30 | |
| Schneider-electric Modicon M340 Bmxp3420302cl | ||
| All of | ||
| Schneider-electric Tsxp574634 Firmware | ||
| Schneider-electric Tsxp574634 | ||
| All of | ||
| Schneider-electric Tsxp575634 Firmware | ||
| Schneider-electric Tsxp575634 | ||
| All of | ||
| Schneider-electric Tsxp576634 Firmware | ||
| Schneider-electric Tsxp576634 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-7537?
CVE-2020-7537 is a vulnerability in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium that could cause denial of service.
Which software versions are affected by CVE-2020-7537?
Modicon M580 Bmep584040 Firmware up to version 3.20, Modicon M580 Bmep582040 Firmware up to version 3.20, Modicon M580 Bmep586040 Firmware up to version 3.20, Modicon M580 Bmep585040 Firmware up to version 3.20, Modicon M580 Bmep582020 Firmware up to version 3.20, Modicon M580 Bmep581020 Firmware up to version 3.20, Modicon M580 Bmep584020 Firmware up to version 3.20, Modicon M580 Bmep583040 Firmware up to version 3.20, Modicon M580 Bmep583020 Firmware up to version 3.20, Bmxp341000 Firmware up to version 3.30, Bmxp342000 Firmware up to version 3.30, Bmxp3420102 Firmware up to version 3.30, Bmxp3420102cl Firmware up to version 3.30, Bmxp342020 Firmware up to version 3.30, Bmxp3420302 Firmware up to version 3.30, Bmxp3420302cl Firmware up to version 3.30, Tsxp574634 Firmware, Tsxp575634 Firmware, Tsxp576634 Firmware.
How severe is CVE-2020-7537?
CVE-2020-7537 has a severity rating of 7.5 out of 10 (high severity).
How can I fix CVE-2020-7537?
Apply the necessary security updates provided by Schneider Electric to fix CVE-2020-7537.
Where can I find more information about CVE-2020-7537?
You can find more information about CVE-2020-7537 at the following link: [SEVD-2020-343-08](https://www.se.com/ww/en/download/document/SEVD-2020-343-08/).
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/schneider-electric
- canonical/schneider-electric modicon m580 bmep584040 firmware
- canonical/schneider-electric modicon m580 bmep584040
- canonical/schneider-electric modicon m580 bmep582040 firmware
- canonical/schneider-electric modicon m580 bmep582040
- canonical/schneider-electric modicon m580 bmep586040 firmware
- canonical/schneider-electric modicon m580 bmep586040
- canonical/schneider-electric modicon m580 bmep585040 firmware
- canonical/schneider-electric modicon m580 bmep585040
- canonical/schneider-electric modicon m580 bmep582020 firmware
- canonical/schneider-electric modicon m580 bmep582020
- canonical/schneider-electric modicon m580 bmep581020 firmware
- canonical/schneider-electric modicon m580 bmep581020
- canonical/schneider-electric modicon m580 bmep584020 firmware
- canonical/schneider-electric modicon m580 bmep584020
- canonical/schneider-electric modicon m580 bmep583040 firmware
- canonical/schneider-electric modicon m580 bmep583040
- canonical/schneider-electric modicon m580 bmep583020 firmware
- canonical/schneider-electric modicon m580 bmep583020
- canonical/schneider-electric bmxp341000 firmware
- canonical/schneider-electric bmxp341000
- canonical/schneider-electric bmxp342000 firmware
- canonical/schneider-electric bmxp342000
- canonical/schneider-electric bmxp3420102 firmware
- canonical/schneider-electric bmxp3420102
- canonical/schneider-electric bmxp3420102cl firmware
- canonical/schneider-electric bmxp3420102cl
- canonical/schneider-electric bmxp342020 firmware
- canonical/schneider-electric bmxp342020
- canonical/schneider-electric bmxp3420302 firmware
- canonical/schneider-electric bmxp3420302
- canonical/schneider-electric bmxp3420302cl firmware
- canonical/schneider-electric bmxp3420302cl
- canonical/schneider-electric tsxp574634 firmware
- canonical/schneider-electric tsxp574634
- canonical/schneider-electric tsxp575634 firmware
- canonical/schneider-electric tsxp575634
- canonical/schneider-electric tsxp576634 firmware
- canonical/schneider-electric tsxp576634
- canonical/schneider-electric modicon m340 bmxp341000 firmware
- canonical/schneider-electric modicon m340 bmxp341000
- canonical/schneider-electric modicon m340 bmxp342000 firmware
- canonical/schneider-electric modicon m340 bmxp342000
- canonical/schneider-electric modicon m340 bmxp3420102 firmware
- canonical/schneider-electric modicon m340 bmxp3420102
- canonical/schneider-electric modicon m340 bmxp3420102cl firmware
- canonical/schneider-electric modicon m340 bmxp3420102cl
- canonical/schneider-electric modicon m340 bmxp342020 firmware
- canonical/schneider-electric modicon m340 bmxp342020
- canonical/schneider-electric modicon m340 bmxp3420302 firmware
- canonical/schneider-electric modicon m340 bmxp3420302
- canonical/schneider-electric modicon m340 bmxp3420302cl firmware
- canonical/schneider-electric modicon m340 bmxp3420302cl