CVE-2018-7794
High
Description
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.
SeverityHigh
CVSS7.5
Exploit probability—
ProductSchneider-electric Modicon M580 Firmware
PublishedJan 6, 2020
First seenJan 6, 2020
Weakness typeCWE-754CWE-754
How to fix
Update
- schneider-electric modicon_m580_firmware2.80 or later
- schneider-electric modicon_m340_firmware3.01 or later
- schneider-electric tsxh5744m_firmware3.20 or later
- schneider-electric tsxh5724m_firmware3.20 or later
- schneider-electric tsxp576634m_firmware3.20 or later
- schneider-electric tsxp57554m_firmware3.20 or later
- schneider-electric tsxp575634m_firmware3.20 or later
- schneider-electric tsxp57454m_firmware3.20 or later
- schneider-electric tsxp574634m_firmware3.20 or later
- schneider-electric tsxp57354m_firmware3.20 or later
- schneider-electric tsxp573634m_firmware3.20 or later
- schneider-electric tsxp57304m_firmware3.20 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric modicon_m580_firmware | v < 2.80 | 2.80 |
| schneider-electric modicon_m340_firmware | v < 3.01 | 3.01 |
| schneider-electric tsxh5744m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxh5724m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxp576634m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxp57554m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxp575634m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxp57454m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxp574634m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxp57354m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxp573634m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxp57304m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxp57254m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxp572634m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxp57204m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxp571634m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxp57154m_firmware | v < 3.20 | 3.20 |
| schneider-electric tsxp57104m_firmware | v < 3.20 | 3.20 |
| schneider-electric 140cpu65150_firmware | v < 3.52 | 3.52 |
| schneider-electric 140cpu65160_firmware | v < 3.52 | 3.52 |
| schneider-electric 140cpu65260_firmware | v < 3.52 | 3.52 |
| schneider-electric 140cpu67261_firmware | v < 3.52 | 3.52 |
| schneider-electric 140cpu67060_firmware | v < 3.52 | 3.52 |
| schneider-electric 140cpu67160_firmware | v < 3.52 | 3.52 |
| schneider-electric 140cpu67260_firmware | v < 3.52 | 3.52 |
| schneider-electric 140cpu65860_firmware | v < 3.52 | 3.52 |
| schneider-electric 140cpu67861_firmware | v < 3.52 | 3.52 |
| schneider-electric 140cpu65160s_firmware | v < 3.52 | 3.52 |
| schneider-electric 140cpu67160s_firmware | v < 3.52 | 3.52 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.