PT-2019-2275 · Schneider Electric · Modicon M340+3

Published 2019-05-14 · Updated 2022-02-03 · CVE-2018-7847

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Modicon M580 versions (affected versions not specified) Modicon M340 versions (affected versions not specified) Modicon Quantum versions (affected versions not specified) Modicon Premium versions (affected versions not specified)

Description The issue is related to errors in access control. It may allow a remote attacker to cause a denial of service or execute arbitrary code by overwriting the controller's configuration settings using the Modbus protocol.

Recommendations For Modicon M580, update the configuration to restrict access to the Modbus protocol until a patch is available. For Modicon M340, consider disabling remote access to the controller until a fix is provided. For Modicon Quantum, restrict modifications to the controller's configuration settings to minimize the risk of exploitation. For Modicon Premium, avoid using the Modbus protocol for configuration changes until the issue is resolved. As a temporary workaround, consider restricting access to the Modbus protocol for all affected controllers until a patch is available.

Exploit

Fix

Improper Authentication

Improper Access Control

Weakness Enumeration

CWE-287

CWE-284

Related Identifiers

BDU:2019-02046

CVE-2018-7847

Affected Products

Modicon M340

Modicon M580

Modicon Premium

Modicon Quantum

References · 5

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0742 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-7847 · Security Note
• https://schneider-electric.com/en/download/document/SEVD-2019-134-11 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02046 · Security Note
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0743 · Note