CVSS: 7.8EPSS: 0%CPEs: 36EXPL: 0CVE-2018-7838
https://notcve.org/view.php?id=CVE-2018-7838
15 Jul 2019 — A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FTP CWD command with a data length greater than 1020 bytes. A power cycle is then needed to reactivate the FTP service. Una CWE-119: Existe una vulnerabilidad de Errores de Búfer en la CPU M580 - BMEP582040 de Modicon... • https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-03 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.8EPSS: 0%CPEs: 41EXPL: 0CVE-2018-7851
https://notcve.org/view.php?id=CVE-2018-7851
22 May 2019 — CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could cause a denial of service to the device that would force a restart to restore availability. CWE-119: Existe una vulnerabilidad de errores de búfer en Modicon M580 con firmware anterior a V2.50, Modicon M340 con firmware... • https://www.schneider-electric.com/en/download/document/SEVD-2019-134-10 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 38EXPL: 0CVE-2019-6819
https://notcve.org/view.php?id=CVE-2019-6819
22 May 2019 — A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the controller in the products: Modicon M340 - firmware versions prior to V3.01, Modicon M580 - firmware versions prior to V2.80, All firmware versions of Modicon Quantum and Modicon Premium. Una CWE-754: Existe una vulnerabilidad de Comprobación Inapropiada para condiciones inusuales o excepcionales, que podría generar una posible Denega... • http://www.securityfocus.com/bid/109004 • CWE-754: Improper Check for Unusual or Exceptional Conditions •