CVE-2018-7759
A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified (instead of the buffer size) as the number of bytes to be copied.
- Score
- CVSS 3.0 7.5 High
- Status
- Modified - cybersecurity@se.com
- Published
- 2018-04-18
- Last modified
- 2024-08-05
- Weaknesses
- CWE-119
Affected products
- 140cpu31110 Firmware (Schneider-electric)
- 140cpu31110c Firmware (Schneider-electric)
- 140cpu43412u Firmware (Schneider-electric)
- 140cpu43412uc Firmware (Schneider-electric)
- 140cpu65150 Firmware (Schneider-electric)
- 140cpu65150c Firmware (Schneider-electric)
- 140cpu65160 Firmware (Schneider-electric)
- 140cpu65160c Firmware (Schneider-electric)
- 140cpu65160s Firmware (Schneider-electric)
- 140cpu65260 Firmware (Schneider-electric)
- 140cpu65260c Firmware (Schneider-electric)
- 140cpu65860 Firmware (Schneider-electric)
- 140cpu65860c Firmware (Schneider-electric)
- Bmxnor0200 Firmware (Schneider-electric)
- Bmxnor0200h Firmware (Schneider-electric)
- Modicon M340 Bmxp341000 Firmware (Schneider-electric)
- Modicon M340 Bmxp341000h Firmware (Schneider-electric)
- Modicon M340 Bmxp342000 Firmware (Schneider-electric)
- Modicon M340 Bmxp3420102 Firmware (Schneider-electric)
- Modicon M340 Bmxp3420102cl Firmware (Schneider-electric)
- Modicon M340 Bmxp342020 Firmware (Schneider-electric)
- Modicon M340 Bmxp342020h Firmware (Schneider-electric)
- Modicon M340 Bmxp3420302 Firmware (Schneider-electric)
- Modicon M340 Bmxp3420302cl Firmware (Schneider-electric)
- Modicon M340 Bmxp3420302h Firmware (Schneider-electric)
- Tsxh5724m Firmware (Schneider-electric)
- Tsxh5724mc Firmware (Schneider-electric)
- Tsxh5744m Firmware (Schneider-electric)
- Tsxh5744mc Firmware (Schneider-electric)
- Tsxp57104m Firmware (Schneider-electric)
- Tsxp57104mc Firmware (Schneider-electric)
- Tsxp57154m Firmware (Schneider-electric)
- Tsxp57154mc Firmware (Schneider-electric)
- Tsxp571634m Firmware (Schneider-electric)
- Tsxp571634mc Firmware (Schneider-electric)
- Tsxp57204m Firmware (Schneider-electric)
- Tsxp57204mc Firmware (Schneider-electric)
- Tsxp57254m Firmware (Schneider-electric)
- Tsxp57254mc Firmware (Schneider-electric)
- Tsxp572634m Firmware (Schneider-electric)
- Tsxp572634mc Firmware (Schneider-electric)
- Tsxp57304m Firmware (Schneider-electric)
- Tsxp57304mc Firmware (Schneider-electric)
- Tsxp57354m Firmware (Schneider-electric)
- Tsxp57354mc Firmware (Schneider-electric)
- Tsxp573634m Firmware (Schneider-electric)
- Tsxp573634mc Firmware (Schneider-electric)
- Tsxp57454m Firmware (Schneider-electric)
- Tsxp57454mc Firmware (Schneider-electric)
- Tsxp574634m Firmware (Schneider-electric)
- Tsxp574634mc Firmware (Schneider-electric)
- Tsxp57554m Firmware (Schneider-electric)
- Tsxp57554mc Firmware (Schneider-electric)
- Tsxp575634m Firmware (Schneider-electric)
- Tsxp575634mc Firmware (Schneider-electric)
- Tsxp576634m Firmware (Schneider-electric)
- Tsxp576634mc Firmware (Schneider-electric)
- Bmxnor0200 (Schneider Electric Se)
- Modicon M340 (Schneider Electric Se)
- Modicon Premium (Schneider Electric Se)
- Modicon Quantum (Schneider Electric Se)
References
- https://www.schneider-electric.com/en/download/document/SEVD-2018-081-02/