CRITICAL🇵🇱 Wersja polska

CVE-2018-7846

CVSS 9.8v3.1pub. 2019-05-22upd. 2024-11-21

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Schneider Electric Modicon M340

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M580

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M580 Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric Modicon Premium

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon Premium Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric Modicon Quantum

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon Quantum Firmware

    OS
    Schneider-Electric
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-7475CRITICAL9.8PL ✓same product

Injection (reflective DLL) w produktach Schneider Electric — przesyłanie złośliwego kodu do sterownika

CVE-2018-7842CRITICAL9.8PL ✓same product

Authentication Bypass w sterownikach Schneider Electric Modicon via brute force Modbus

CVE-2018-7847CRITICAL9.8PL ✓same product

Nieprawidłowa kontrola dostępu w sterownikach Schneider Electric Modicon via Modbus

CVE-2019-6808CRITICAL9.8PL ✓same product

RCE w sterownikach Schneider Electric Modicon przez protokół Modbus

CVE-2019-6815CRITICAL9.1PL ✓same product

Podatność kontroli dostępu w Schneider Electric Modicon Quantum — DoS i modyfikacja konfiguracji PLC