CVE-2018-7843
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading memory blocks with an invalid data size or with an invalid data offset in the controller over Modbus.
CWE-248: Existe una vulnerabilidad de Excepción no Detectada en todas las versiones de Modicon M580, Modicon M340, Modicon Quantum y Modicon Premium, lo que podría generar una Denegación de Servicio cuando se lee bloques de memoria con un tamaño de datos no válido o con un desplazamiento de datos no válido en el controlador sobre protocolo Modbus.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-03-08 CVE Reserved
- 2019-05-22 CVE Published
- 2023-03-07 EPSS Updated
- 2023-10-20 First Exploit
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-125: Out-of-bounds Read
CAPEC
References (3)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|---|---|
| https://github.com/yanissec/CVE-2018-7843 | 2023-10-20 | |
| https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0738 | 2024-08-05 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11 | 2022-02-03 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Firmware Search vendor "Schneider-electric" for product "Modicon M580 Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Search vendor "Schneider-electric" for product "Modicon M580" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Firmware Search vendor "Schneider-electric" for product "Modicon M340 Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Search vendor "Schneider-electric" for product "Modicon M340" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon Quantum Firmware Search vendor "Schneider-electric" for product "Modicon Quantum Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon Quantum Search vendor "Schneider-electric" for product "Modicon Quantum" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon Premium Firmware Search vendor "Schneider-electric" for product "Modicon Premium Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon Premium Search vendor "Schneider-electric" for product "Modicon Premium" | - | - |
Safe
|