PT-2020-19621 · Schneider Electric · Modicon M340+3

Published

2020-12-11

·

Updated

2024-04-10

·

CVE-2020-7543

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Modicon M580 (affected versions not specified) Modicon M340 (affected versions not specified) Legacy Controllers Modicon Quantum (affected versions not specified) Legacy Controllers Modicon Premium (affected versions not specified)
Description A CWE-754: Improper Check for Unusual or Exceptional Conditions issue exists that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.
Recommendations For Modicon M580, check the security notifications for the affected versions and follow the provided guidance to resolve the issue. For Modicon M340, check the security notifications for the affected versions and follow the provided guidance to resolve the issue. For Legacy Controllers Modicon Quantum, check the security notifications for the affected versions and follow the provided guidance to resolve the issue. For Legacy Controllers Modicon Premium, check the security notifications for the affected versions and follow the provided guidance to resolve the issue. As a temporary workaround, consider restricting access to the Modbus protocol to minimize the risk of exploitation.

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2020-7543

Affected Products

Modicon M340
Modicon M580
Modicon Premium
Modicon Quantum