PT-2019-11105 · Schneider Electric · Modicon Ethernet Module+1

Publicado 2019-07-15 · Atualizado 2022-04-19 · CVE-2018-7838

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Modicon M580 CPU - BMEP582040 versions prior to V2.90 Modicon Ethernet Module BMENOC0301 versions prior to V2.16

Description: A buffer error issue exists that could cause denial of service on the FTP service when it receives a FTP CWD command with a data length greater than 1020 bytes, requiring a power cycle to reactivate the FTP service.

Recommendations: For Modicon M580 CPU - BMEP582040 versions prior to V2.90, update to version V2.90 or later to resolve the issue. For Modicon Ethernet Module BMENOC0301 versions prior to V2.16, update to version V2.16 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-7838

Produtos afetados

Modicon Ethernet Module

Modicon M580 Cpu

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-7838 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7838 · Nota de Segurança
• https://schneider-electric.com/ww/en/download/document/SEVD-2019-190-03 · Aviso do Fabricante