PT-2019-2277 · Schneider Electric · Modicon M340+3

Published 2019-05-14 · Updated 2022-02-03 · CVE-2018-7849

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Modicon M580 versions (affected versions not specified) Modicon M340 versions (affected versions not specified) Modicon Quantum versions (affected versions not specified) Modicon Premium versions (affected versions not specified)

Description The issue is related to an uncaught exception in the programmable logic controller's software, which can be exploited by a remote attacker to cause a denial of service. This occurs when the controller improperly checks the integrity of files sent over the Modbus protocol, specifically when the files have incorrect checksums.

Recommendations For Modicon M580, update the software to a version that properly handles exceptions and checks data integrity. For Modicon M340, implement a workaround to correctly validate the integrity of files sent over Modbus. For Modicon Quantum, restrict access to the Modbus protocol until a patch is available that fixes the improper data integrity check. For Modicon Premium, consider disabling the Modbus protocol temporarily until a software update is released that addresses the uncaught exception vulnerability.

Exploit

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-248

CWE-755

Related Identifiers

BDU:2019-02048

CVE-2018-7849

Affected Products

Modicon M340

Modicon M580

Modicon Premium

Modicon Quantum

References · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0737 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-7849 · Security Note
• https://schneider-electric.com/en/download/document/SEVD-2019-134-11 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02048 · Security Note