CVE-2018-7856

published 2019-05-22

CVE-2018-7856: A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of Service when writing invalid memory blocks to the controller over Modbus.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	modicon_m340_firmware	< 3.10	3.10
schneider-electric	modicon_m580_firmware	< 2.90	2.90

CWE-754