CVE-2018-7851
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could cause a denial of service to the device that would force a restart to restore availability.
CWE-119: Existe una vulnerabilidad de errores de búfer en Modicon M580 con firmware anterior a V2.50, Modicon M340 con firmware anterior a V3.01, BMxCRA312xx con firmware anterior a V2.40 y todas las versiones de firmware de Modicon Premium y 140CRA312xxx al enviar un paquete Modbus especialmente creado, que podría generar una Denegación de Servicio al dispositivo que forzaría un reinicio para restaurar la disponibilidad.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-03-08 CVE Reserved
- 2019-05-22 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.schneider-electric.com/en/download/document/SEVD-2019-134-10 | 2024-04-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Bmeh582040 Search vendor "Schneider-electric" for product "Bmeh582040" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Bmeh582040c Search vendor "Schneider-electric" for product "Bmeh582040c" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Bmeh584040 Search vendor "Schneider-electric" for product "Bmeh584040" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Bmeh584040c Search vendor "Schneider-electric" for product "Bmeh584040c" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Bmeh586040 Search vendor "Schneider-electric" for product "Bmeh586040" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Bmeh586040c Search vendor "Schneider-electric" for product "Bmeh586040c" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep581020 Search vendor "Schneider-electric" for product "Modicon M580 Bmep581020" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep581020h Search vendor "Schneider-electric" for product "Modicon M580 Bmep581020h" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep582020 Search vendor "Schneider-electric" for product "Modicon M580 Bmep582020" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep582020h Search vendor "Schneider-electric" for product "Modicon M580 Bmep582020h" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep582040 Search vendor "Schneider-electric" for product "Modicon M580 Bmep582040" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep582040h Search vendor "Schneider-electric" for product "Modicon M580 Bmep582040h" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep582040s Search vendor "Schneider-electric" for product "Modicon M580 Bmep582040s" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep583020 Search vendor "Schneider-electric" for product "Modicon M580 Bmep583020" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep583040 Search vendor "Schneider-electric" for product "Modicon M580 Bmep583040" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep584020 Search vendor "Schneider-electric" for product "Modicon M580 Bmep584020" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep584040 Search vendor "Schneider-electric" for product "Modicon M580 Bmep584040" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep584040s Search vendor "Schneider-electric" for product "Modicon M580 Bmep584040s" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep585040 Search vendor "Schneider-electric" for product "Modicon M580 Bmep585040" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep585040c Search vendor "Schneider-electric" for product "Modicon M580 Bmep585040c" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep586040 Search vendor "Schneider-electric" for product "Modicon M580 Bmep586040" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M580 Firmware Search vendor "Schneider-electric" for product "M580 Firmware" | < 2.50 Search vendor "Schneider-electric" for product "M580 Firmware" and version " < 2.50" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M580 Bmep586040c Search vendor "Schneider-electric" for product "Modicon M580 Bmep586040c" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M340 Firmware Search vendor "Schneider-electric" for product "M340 Firmware" | < 3.01 Search vendor "Schneider-electric" for product "M340 Firmware" and version " < 3.01" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp341000 Search vendor "Schneider-electric" for product "Modicon M340 Bmxp341000" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M340 Firmware Search vendor "Schneider-electric" for product "M340 Firmware" | < 3.01 Search vendor "Schneider-electric" for product "M340 Firmware" and version " < 3.01" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp341000h Search vendor "Schneider-electric" for product "Modicon M340 Bmxp341000h" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M340 Firmware Search vendor "Schneider-electric" for product "M340 Firmware" | < 3.01 Search vendor "Schneider-electric" for product "M340 Firmware" and version " < 3.01" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp342000 Search vendor "Schneider-electric" for product "Modicon M340 Bmxp342000" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M340 Firmware Search vendor "Schneider-electric" for product "M340 Firmware" | < 3.01 Search vendor "Schneider-electric" for product "M340 Firmware" and version " < 3.01" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420102 Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420102" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M340 Firmware Search vendor "Schneider-electric" for product "M340 Firmware" | < 3.01 Search vendor "Schneider-electric" for product "M340 Firmware" and version " < 3.01" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420102cl Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420102cl" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M340 Firmware Search vendor "Schneider-electric" for product "M340 Firmware" | < 3.01 Search vendor "Schneider-electric" for product "M340 Firmware" and version " < 3.01" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp342020 Search vendor "Schneider-electric" for product "Modicon M340 Bmxp342020" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M340 Firmware Search vendor "Schneider-electric" for product "M340 Firmware" | < 3.01 Search vendor "Schneider-electric" for product "M340 Firmware" and version " < 3.01" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp342020h Search vendor "Schneider-electric" for product "Modicon M340 Bmxp342020h" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M340 Firmware Search vendor "Schneider-electric" for product "M340 Firmware" | < 3.01 Search vendor "Schneider-electric" for product "M340 Firmware" and version " < 3.01" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420302 Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420302" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M340 Firmware Search vendor "Schneider-electric" for product "M340 Firmware" | < 3.01 Search vendor "Schneider-electric" for product "M340 Firmware" and version " < 3.01" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420302cl Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420302cl" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | M340 Firmware Search vendor "Schneider-electric" for product "M340 Firmware" | < 3.01 Search vendor "Schneider-electric" for product "M340 Firmware" and version " < 3.01" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420302h Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420302h" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Bmx\/e Cra Firmware Search vendor "Schneider-electric" for product "Bmx\/e Cra Firmware" | < 2.40 Search vendor "Schneider-electric" for product "Bmx\/e Cra Firmware" and version " < 2.40" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Bmxcra31200 Search vendor "Schneider-electric" for product "Bmxcra31200" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Bmx\/e Cra Firmware Search vendor "Schneider-electric" for product "Bmx\/e Cra Firmware" | < 2.40 Search vendor "Schneider-electric" for product "Bmx\/e Cra Firmware" and version " < 2.40" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Bmxcra31210c Search vendor "Schneider-electric" for product "Bmxcra31210c" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon Premium Firmware Search vendor "Schneider-electric" for product "Modicon Premium Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon Premium Search vendor "Schneider-electric" for product "Modicon Premium" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cra312xxx Firmware Search vendor "Schneider-electric" for product "140cra312xxx Firmware" | * | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cra312xxx Search vendor "Schneider-electric" for product "140cra312xxx" | - | - |
Safe
|