Schneider Electric Modicon Multiple Denial Of Service Vulnerabilities (CVE-2018-7843; CVE-2018-7852; CVE-2018-7853; CVE-2018-7854; CVE-2018-7855; CVE-2018-7856; CVE-2018-7857; CVE-2019-6807)

Multiple denial of service vulnerabilities exist in Schneider Electric Modicon. A remote unauthenticated attacker could send crafted UMAS command packets to cause denial of service conditions...

CVE-2018-7854

creationtimestamp| type| source ---|---|--- 2019-05-22 20:48:20+00:00| seen| https://t.me/cvemitreorg/159 2025-04-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-01...

CVE-2018-7854

CVE-2018-7854 affects Schneider Electric Modicon M580, M340, Quantum, and Premium PLCs. The issue is a CWE-248 Uncaught Exception that can cause denial of service when invalid debug parameters are sent over Modbus. The provided documents confirm affected models and the root cause (uncaught except...