CVE-2018-7843

🗓️ 22 May 2019 19:58:58Reported by schneiderType

Uncaught Exception vulnerability in Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium causing denial of service over Modbus

Reporter	Title	Published	Views	Family All 32
Circl	CVE-2018-7843	24 Apr 202510:00	–	circl
CNVD	Multiple Schneider Electric Products Resource Management Error Vulnerability	23 May 201900:00	–	cnvd
Check Point Advisories	Schneider Electric Modicon Multiple Denial Of Service Vulnerabilities (CVE-2018-7843; CVE-2018-7852; CVE-2018-7853; CVE-2018-7854; CVE-2018-7855; CVE-2018-7856; CVE-2018-7857; CVE-2019-6807)	7 Jul 201900:00	–	checkpoint_advisories
Cvelist	CVE-2018-7843	22 May 201919:58	–	cvelist
NVD	CVE-2018-7843	22 May 201920:29	–	nvd
Tenable Nessus	Schneider-electric Modicon Unspecified Vulnerability	8 Nov 201900:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Controllers Authentication Bypass By Spoofing (CVE-2018-7842)	7 Feb 202200:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Controllers Uncaught Exception (CVE-2018-7843)	7 Feb 202200:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Controllers Exposure of Sensitive Information to an Unauthorized Actor (CVE-2018-7844)	7 Feb 202200:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Controllers Out-of-Bounds Read (CVE-2018-7845)	7 Feb 202200:00	–	nessus

NVD

Node

schneider-electric modicon_m580_firmware

AND

schneider-electric modicon_m580Match-

Node

schneider-electric modicon_m340_firmware

AND

schneider-electric modicon_m340Match-

Node

schneider-electric modicon_quantum_firmware

AND

schneider-electric modicon_quantumMatch-

Node

schneider-electric modicon_premium_firmware

AND

schneider-electric modicon_premiumMatch-

[
  {
    "product": "Modicon M580 Modicon M340 Modicon Quantum Modicon Premium",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Modicon M580 Modicon M340 Modicon Quantum Modicon Premium"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2018-0738
schneider-electric	www.schneider-electric.com/en/download/document/SEVD-2019-134-11/

21 Nov 2024 04:12Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

EPSS0.15659

CWE-125