PT-2019-2332 · Schneider Electric · Modicon M340+3

Published 2019-05-14 · Updated 2022-02-03 · CVE-2018-7844

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Modicon M580 (affected versions not specified) Modicon M340 (affected versions not specified) Modicon Quantum (affected versions not specified) Modicon Premium (affected versions not specified)

Description A vulnerability exists that could cause the disclosure of SNMP information when reading memory blocks from the controller over Modbus. This issue is related to the exposure of information and may allow a remote attacker to access confidential SNMP protocol information.

Recommendations For Modicon M580, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Modicon M340, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Modicon Quantum, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Modicon Premium, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2019-02107

CVE-2018-7844

Affected Products

Modicon M340

Modicon M580

Modicon Premium

Modicon Quantum

References · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0739 · Exploit
• https://schneider-electric.com/en/download/document/SEVD-2019-134-11 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7844 · Security Note
• https://bdu.fstec.ru/vul/2019-02107 · Security Note