PT-2019-2279 · Schneider Electric · Modicon M580+3
Publicado
2019-05-14
·
Atualizado
2022-02-03
·
CVE-2018-7853
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Modicon M580 (affected versions not specified)
Modicon M340 (affected versions not specified)
Modicon Quantum (affected versions not specified)
Modicon Premium (affected versions not specified)
Description
The issue is related to an uncaught exception in the programmable logic controller's software, which can be exploited by a remote attacker to cause a denial of service. This can happen when the controller reads invalid physical memory blocks using the Modbus protocol.
Recommendations
For Modicon M580, update to a version that includes a fix for the uncaught exception issue.
For Modicon M340, update to a version that includes a fix for the uncaught exception issue.
For Modicon Quantum, update to a version that includes a fix for the uncaught exception issue.
For Modicon Premium, update to a version that includes a fix for the uncaught exception issue.
As a temporary workaround, consider restricting access to the Modbus protocol to minimize the risk of exploitation.
Exploit
Correção
Improper Check for Exceptional Conditions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Modicon M340
Modicon M580
Modicon Premium
Modicon Quantum