PT-2019-2272 · Schneider Electric · Modicon M340+3
Publicado
2019-05-14
·
Atualizado
2022-02-03
·
CVE-2018-7843
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Modicon M580 (affected versions not specified)
Modicon M340 (affected versions not specified)
Modicon Quantum (affected versions not specified)
Modicon Premium (affected versions not specified)
Description
A vulnerability exists in the Modicon programmable logic controller software related to errors in handling exceptional situations. This issue could cause denial of service when reading memory blocks with an invalid data size or with an invalid data offset in the controller over Modbus. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service.
Recommendations
For Modicon M580, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Modicon M340, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Modicon Quantum, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Modicon Premium, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Modicon M340
Modicon M580
Modicon Premium
Modicon Quantum