Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2020-7542
HistoryDec 11, 2020 - 1:15 a.m.

CVE-2020-7542

2020-12-1101:15:00
CWE-754
[email protected]
web.nvd.nist.gov
43
3
cve-2020-7542
cwe-754
modicon
m580
m340
quantum
premium
denial of service
security issue

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

42.1%

JSON

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.

CPENameOperatorVersion
schneider-electric:modicon_m580_bmep584040_firmwareschneider-electric modicon m580 bmep584040 firmwarelt3.20
schneider-electric:modicon_m580_bmep582040_firmwareschneider-electric modicon m580 bmep582040 firmwarelt3.20
schneider-electric:modicon_m580_bmep586040_firmwareschneider-electric modicon m580 bmep586040 firmwarelt3.20
schneider-electric:modicon_m580_bmep585040_firmwareschneider-electric modicon m580 bmep585040 firmwarelt3.20
schneider-electric:modicon_m580_bmep582020_firmwareschneider-electric modicon m580 bmep582020 firmwarelt3.20
schneider-electric:modicon_m580_bmep581020_firmwareschneider-electric modicon m580 bmep581020 firmwarelt3.20
schneider-electric:modicon_m580_bmep584020_firmwareschneider-electric modicon m580 bmep584020 firmwarelt3.20
schneider-electric:modicon_m580_bmep583040_firmwareschneider-electric modicon m580 bmep583040 firmwarelt3.20
schneider-electric:modicon_m580_bmep583020_firmwareschneider-electric modicon m580 bmep583020 firmwarelt3.20
schneider-electric:modicon_m340_bmxp341000_firmwareschneider-electric modicon m340 bmxp341000 firmwarelt3.30
Rows per page:
1-10 of 201

Social References

More

Related

nessus 1
prion 1
cvelist 1
nessus
nessus
Schneider Electric Modicon Improper Check for Unusual or Exceptional Conditions (CVE-2020-7542)
2022-02-07 00:00:00
prion
prion
Design/Logic Flaw
2020-12-11 01:15:00
cvelist
cvelist
CVE-2020-7542
2020-12-11 00:52:14

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

42.1%

JSON
Related for CVE-2020-7542
nessus1prion1cvelist1