PT-2019-2274 · Schneider Electric · Modicon M340+3
Publicado
2019-05-14
·
Atualizado
2022-02-03
·
CVE-2018-7846
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Modicon M580 versions (affected versions not specified)
Modicon M340 versions (affected versions not specified)
Modicon Quantum versions (affected versions not specified)
Modicon Premium versions (affected versions not specified)
Description
The issue is related to a trust boundary violation when connecting to the controller, which could allow an attacker to gain unauthorized access by conducting a brute force attack on the Modbus protocol.
Recommendations
For Modicon M580, update to a version that addresses the trust boundary violation issue.
For Modicon M340, update to a version that addresses the trust boundary violation issue.
For Modicon Quantum, update to a version that addresses the trust boundary violation issue.
For Modicon Premium, update to a version that addresses the trust boundary violation issue.
As a temporary workaround, consider restricting access to the Modbus protocol to minimize the risk of exploitation.
Exploit
Correção
Exposure of Resource to Wrong Sphere
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Modicon M340
Modicon M580
Modicon Premium
Modicon Quantum