Schneider Electric Modicon M580 UMAS function code 0x6d multiple denial-of-service vulnerabilities

🗓️ 10 Jun 2019 00:00:00Reported by Talos IntelligenceType

talos🔗 www.talosintelligence.com👁 211 Views

The Schneider Electric Modicon M580 UMAS protocol in firmware version SV2.70 is vulnerable to multiple denial-of-service flaws, triggered by specially crafted commands, resulting in complete stoppage of remote communications

Reporter	Title	Published	Views	Family All 33
Circl	CVE-2018-7852	22 May 201920:48	–	circl
Check Point Advisories	Schneider Electric Modicon Multiple Denial Of Service Vulnerabilities (CVE-2018-7843; CVE-2018-7852; CVE-2018-7853; CVE-2018-7854; CVE-2018-7855; CVE-2018-7856; CVE-2018-7857; CVE-2019-6807)	7 Jul 201900:00	–	checkpoint_advisories
CVE	CVE-2018-7852	22 May 201920:01	–	cve
Cvelist	CVE-2018-7852	22 May 201920:01	–	cvelist
NVD	CVE-2018-7852	22 May 201920:29	–	nvd
Tenable Nessus	Schneider-electric Modicon Improper Input Validation	8 Nov 201900:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Controllers Authentication Bypass By Spoofing (CVE-2018-7842)	7 Feb 202200:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Controllers Uncaught Exception (CVE-2018-7843)	7 Feb 202200:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Controllers Exposure of Sensitive Information to an Unauthorized Actor (CVE-2018-7844)	7 Feb 202200:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Controllers Out-of-Bounds Read (CVE-2018-7845)	7 Feb 202200:00	–	nessus