Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-7851

CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could cause a denial of service to the device that would force a restart to restore availability.

Published

2019-05-22T20:29:01.853

Last Modified

2024-11-21T04:12:52.710

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

8.0

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-119
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System schneider-electric m580_firmware < 2.50 Yes
Hardware schneider-electric bmeh582040 - No
Hardware schneider-electric bmeh582040c - No
Hardware schneider-electric bmeh584040 - No
Hardware schneider-electric bmeh584040c - No
Hardware schneider-electric bmeh586040 - No
Hardware schneider-electric bmeh586040c - No
Hardware schneider-electric modicon_m580_bmep581020 - No
Hardware schneider-electric modicon_m580_bmep581020h - No
Hardware schneider-electric modicon_m580_bmep582020 - No
Hardware schneider-electric modicon_m580_bmep582020h - No
Hardware schneider-electric modicon_m580_bmep582040 - No
Hardware schneider-electric modicon_m580_bmep582040h - No
Hardware schneider-electric modicon_m580_bmep582040s - No
Hardware schneider-electric modicon_m580_bmep583020 - No
Hardware schneider-electric modicon_m580_bmep583040 - No
Hardware schneider-electric modicon_m580_bmep584020 - No
Hardware schneider-electric modicon_m580_bmep584040 - No
Hardware schneider-electric modicon_m580_bmep584040s - No
Hardware schneider-electric modicon_m580_bmep585040 - No
Hardware schneider-electric modicon_m580_bmep585040c - No
Hardware schneider-electric modicon_m580_bmep586040 - No
Hardware schneider-electric modicon_m580_bmep586040c - No
Operating System schneider-electric m340_firmware < 3.01 Yes
Hardware schneider-electric modicon_m340_bmxp341000 - No
Hardware schneider-electric modicon_m340_bmxp341000h - No
Hardware schneider-electric modicon_m340_bmxp342000 - No
Hardware schneider-electric modicon_m340_bmxp3420102 - No
Hardware schneider-electric modicon_m340_bmxp3420102cl - No
Hardware schneider-electric modicon_m340_bmxp342020 - No
Hardware schneider-electric modicon_m340_bmxp342020h - No
Hardware schneider-electric modicon_m340_bmxp3420302 - No
Hardware schneider-electric modicon_m340_bmxp3420302cl - No
Hardware schneider-electric modicon_m340_bmxp3420302h - No
Operating System schneider-electric bmx\/e_cra_firmware < 2.40 Yes
Hardware schneider-electric bmxcra31200 - No
Hardware schneider-electric bmxcra31210c - No
Operating System schneider-electric modicon_premium_firmware * Yes
Hardware schneider-electric modicon_premium - No
Operating System schneider-electric 140cra312xxx_firmware * Yes
Hardware schneider-electric 140cra312xxx - No
References