PT-2019-2271 · Schneider Electric · Modicon Premium+3
Publicado
2019-05-14
·
Atualizado
2022-02-03
·
CVE-2018-7842
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Modicon M580 (affected versions not specified)
Modicon M340 (affected versions not specified)
Modicon Quantum (affected versions not specified)
Modicon Premium (affected versions not specified)
Description
A vulnerability exists that could cause an elevation of privilege by conducting a brute force attack on Modbus parameters sent to the controller. This issue is related to authentication bypass by spoofing, which may allow a remote attacker to exploit the vulnerability and gain elevated privileges.
Recommendations
For Modicon M580, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Modicon M340, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Modicon Quantum, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Modicon Premium, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Authentication Bypass by Spoofing
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Modicon M340
Modicon M580
Modicon Premium
Modicon Quantum