7.5
CVE-2018-7857
- EPSS 0.49%
- Veröffentlicht 22.05.2019 21:29:00
- Zuletzt bearbeitet 21.11.2024 04:12:53
- Quelle cybersecurity@se.com
- Teams Watchlist Login
- Unerledigt Login
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Modicon Premium Firmware Version < 3.20
Schneider-electric ≫ Modicon Quantum Firmware Version < 3.60
Schneider-electric ≫ Modicon M340 Firmware Version < 3.01
Schneider-electric ≫ Modicon M580 Firmware Version < 2.80
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.49% | 0.629 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-754 Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.