CVE-2018-7845

🗓️ 22 May 2019 20:00:49Reported by schneiderType

Out-of-bounds Read vulnerability in Modicon M580, M340, Quantum, and Premium could reveal unexpected dat

Reporter	Title	Published	Views	Family All 34
BDU FSTEC	The vulnerability of the microprogrammed programmable logic controller Modicon, related to reading buffers from external sources, allows a intruder to disclose protected information.	14 Jun 201900:00	–	bdu_fstec
Circl	CVE-2018-7845	24 Apr 202510:00	–	circl
CNVD	Buffer Overflow Vulnerability in Multiple Schneider Electric Products (CNVD-2019-34829)	23 May 201900:00	–	cnvd
Check Point Advisories	Schneider Electric Modicon Multiple Information Disclosure Vulnerabilities (CVE-2018-7844; CVE-2018-7845; CVE-2019-6806)	7 Jul 201900:00	–	checkpoint_advisories
CVE	CVE-2018-7845	22 May 201920:00	–	cve
EUVD	EUVD-2018-19557	7 Oct 202500:30	–	euvd
NVD	CVE-2018-7845	22 May 201920:29	–	nvd
Tenable Nessus	Schneider-electric Modicon Out-of-bounds Read	8 Nov 201900:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Controllers Authentication Bypass By Spoofing (CVE-2018-7842)	7 Feb 202200:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Controllers Uncaught Exception (CVE-2018-7843)	7 Feb 202200:00	–	nessus

[
  {
    "product": "Modicon M580 Modicon M340 Modicon Quantum Modicon Premium",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Modicon M580 Modicon M340 Modicon Quantum Modicon Premium"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2018-0745
schneider-electric	www.schneider-electric.com/en/download/document/SEVD-2019-134-11/

10 Jun 2019 16:06Current

7.4High risk

Vulners AI Score7.4

EPSS0.04675