7.5
CVE-2018-7855
- EPSS 2.63%
- Veröffentlicht 22.05.2019 21:29:00
- Zuletzt bearbeitet 21.11.2024 04:12:53
- Quelle cybersecurity@se.com
- CVE-Watchlists
- Unerledigt
LoginA CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service when sending invalid breakpoint parameters to the controller over Modbus
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Modicon Premium Firmware Version-
Schneider-electric ≫ Modicon Quantum Firmware Version-
Schneider-electric ≫ Modicon M340 Firmware Version < 3.10
Schneider-electric ≫ Modicon M580 Firmware Version < 2.90
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.63% | 0.835 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-754 Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.
https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0766
https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0767