6.8

CVE-2018-7851

CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could cause a denial of service to the device that would force a restart to restore availability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ M580 Firmware Version < 2.50
   Schneider-electric ≫ Bmeh582040 Version -
   Schneider-electric ≫ Bmeh582040c Version -
   Schneider-electric ≫ Bmeh584040 Version -
   Schneider-electric ≫ Bmeh584040c Version -
   Schneider-electric ≫ Bmeh586040 Version -
   Schneider-electric ≫ Bmeh586040c Version -
   Schneider-electric ≫ Modicon M580 Bmep581020 Version -
   Schneider-electric ≫ Modicon M580 Bmep581020h Version -
   Schneider-electric ≫ Modicon M580 Bmep582020 Version -
   Schneider-electric ≫ Modicon M580 Bmep582020h Version -
   Schneider-electric ≫ Modicon M580 Bmep582040 Version -
   Schneider-electric ≫ Modicon M580 Bmep582040h Version -
   Schneider-electric ≫ Modicon M580 Bmep582040s Version -
   Schneider-electric ≫ Modicon M580 Bmep583020 Version -
   Schneider-electric ≫ Modicon M580 Bmep583040 Version -
   Schneider-electric ≫ Modicon M580 Bmep584020 Version -
   Schneider-electric ≫ Modicon M580 Bmep584040 Version -
   Schneider-electric ≫ Modicon M580 Bmep584040s Version -
   Schneider-electric ≫ Modicon M580 Bmep585040 Version -
   Schneider-electric ≫ Modicon M580 Bmep585040c Version -
   Schneider-electric ≫ Modicon M580 Bmep586040 Version -
   Schneider-electric ≫ Modicon M580 Bmep586040c Version -
Schneider-electric ≫ Bmx/e Cra Firmware Version < 2.40
   Schneider-electric ≫ Bmxcra31200 Version -
   Schneider-electric ≫ Bmxcra31210c Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.19% 0.639
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 6.8 8 6.9
AV:N/AC:L/Au:S/C:N/I:N/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://www.schneider-electric.com/en/download/document/SEVD-2019-134-10/
Vendor Advisory