The vulnerability of web-based services of microprogramming software for programmable logic controllers from Schneider Electric—Modicon Premium, Modicon Quantum, and Modicon M340—allows a intruder to trigger a service failure.

Modicon Premium, Quantum, and M340 web services are vulnerable; data outside the buffer enables SOAP-triggered failures.

Reporter	Title	Published	Views	Family All 9
Tenable Nessus	Schneider Electric Modicon Multiple Controllers SOAP Requests Triggered Buffer Overflow	8 May 201900:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2018-7762)	29 Jun 202300:00	–	nessus
CNVD	Buffer overflow vulnerability in multiple Schneider Electric products (CNVD-2018-11262)	10 May 201800:00	–	cnvd
CVE	CVE-2018-7762	18 Apr 201820:00	–	cve
Cvelist	CVE-2018-7762	18 Apr 201820:00	–	cvelist
NVD	CVE-2018-7762	18 Apr 201820:29	–	nvd
Prion	Buffer overflow	18 Apr 201820:29	–	prion
Positive Technologies	PT-2017-3704 · Schneider Electric · Modicon Premium +3	28 Apr 201700:00	–	ptsecurity
Positive Technologies	PT-2018-21: Buffer Overflow in Schneider Electric's Modicon Premium, Modicon Quantum, and Modicon M340	28 Apr 201700:00	–	ptsecurity