CVE-2020-7542
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - cybersecurity@se.com
- Published
- 2020-12-11
- Last modified
- 2024-08-04
- Weaknesses
- CWE-754
Affected products
- 140cpu65150 Firmware (Schneider-electric)
- Modicon M340 Bmxp341000 Firmware (Schneider-electric)
- Modicon M340 Bmxp342000 Firmware (Schneider-electric)
- Modicon M340 Bmxp3420102 Firmware (Schneider-electric)
- Modicon M340 Bmxp3420102cl Firmware (Schneider-electric)
- Modicon M340 Bmxp342020 Firmware (Schneider-electric)
- Modicon M340 Bmxp3420302 Firmware (Schneider-electric)
- Modicon M340 Bmxp3420302cl Firmware (Schneider-electric)
- Modicon M580 Bmep581020 Firmware (Schneider-electric)
- Modicon M580 Bmep582020 Firmware (Schneider-electric)
- Modicon M580 Bmep582040 Firmware (Schneider-electric)
- Modicon M580 Bmep583020 Firmware (Schneider-electric)
- Modicon M580 Bmep583040 Firmware (Schneider-electric)
- Modicon M580 Bmep584020 Firmware (Schneider-electric)
- Modicon M580 Bmep584040 Firmware (Schneider-electric)
- Modicon M580 Bmep585040 Firmware (Schneider-electric)
- Modicon M580 Bmep586040 Firmware (Schneider-electric)
- Tsxp574634 Firmware (Schneider-electric)
- Tsxp575634 Firmware (Schneider-electric)
- Tsxp576634 Firmware (Schneider-electric)
References
- https://www.se.com/ww/en/download/document/SEVD-2020-343-08/
