CVE-2018-7846

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cybersecurity@se.com

Published

2019-05-22

Last modified

2024-08-05

Weaknesses

CWE-668

Affected products

• Modicon M340 Firmware (Schneider-electric)
• Modicon M580 Firmware (Schneider-electric)
• Modicon Premium Firmware (Schneider-electric)
• Modicon Quantum Firmware (Schneider-electric)

References

• https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0735