PT-2019-2342 · Schneider Electric · Bmxcra312Xx+4

Published 2019-05-14 · Updated 2024-04-10 · CVE-2018-7851

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to V2.50 Modicon M340 versions prior to V3.01 BMxCRA312xx versions prior to V2.40 Modicon Premium (all firmware versions) 140CRA312xxx (all firmware versions)

Description The issue is related to buffer errors in the firmware of certain Modicon programmable logic controllers. Exploitation of this issue could allow a remote attacker to cause a denial of service by sending a specially crafted Modbus packet, forcing the device to restart to restore availability.

Recommendations For Modicon M580 versions prior to V2.50, update the firmware to V2.50 or later. For Modicon M340 versions prior to V3.01, update the firmware to V3.01 or later. For BMxCRA312xx versions prior to V2.40, update the firmware to V2.40 or later. For Modicon Premium and 140CRA312xxx, consider restricting access to the Modbus protocol until a firmware update is available. As a temporary workaround, consider implementing network segmentation to limit the attack surface.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2019-02117

CVE-2018-7851

Affected Products

140Cra312Xxx

Bmxcra312Xx

Modicon M340

Modicon M580

Modicon Premium

References · 5

• https://bdu.fstec.ru/vul/2019-02117 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-7851 · Security Note
• https://schneider-electric.com/en/download/document/SEVD-2019-134-10 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-7851 · Vendor Advisory
• https://t.me/cvenotify/19691 · Telegram Post