PT-2019-2332 · Schneider Electric · Modicon M340+3

Publicado

2019-05-14

·

Atualizado

2022-02-03

·

CVE-2018-7844

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Modicon M580 (affected versions not specified) Modicon M340 (affected versions not specified) Modicon Quantum (affected versions not specified) Modicon Premium (affected versions not specified)
Description A vulnerability exists that could cause the disclosure of SNMP information when reading memory blocks from the controller over Modbus. This issue is related to the exposure of information and may allow a remote attacker to access confidential SNMP protocol information.
Recommendations For Modicon M580, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Modicon M340, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Modicon Quantum, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Modicon Premium, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2019-02107
CVE-2018-7844

Produtos afetados

Modicon M340
Modicon M580
Modicon Premium
Modicon Quantum