CVE-2018-7853

published 2019-05-22

CVE-2018-7853: A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid physical memory blocks in the controller over Modbus

Affected

2 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	modicon_m340_firmware	< 3.10	3.10
schneider-electric	modicon_m580_firmware	< 2.90	2.90

CWE-754