CRITICAL🇵🇱 Wersja polska

CVE-2018-7847

CVSS 9.8v3.1pub. 2019-05-22upd. 2024-11-21

A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service or potential code execution by overwriting configuration settings of the controller over Modbus.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Schneider Electric Modicon M340

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M580

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M580 Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric Modicon Premium

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon Premium Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric Modicon Quantum

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon Quantum Firmware

    OS
    Schneider-Electric
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEDoSAuth Bypass
CWE
References

Related vulnerabilities

CVE-2020-7475CRITICAL9.8PL ✓same product

Injection (reflective DLL) w produktach Schneider Electric — przesyłanie złośliwego kodu do sterownika

CVE-2018-7842CRITICAL9.8PL ✓same product

Authentication Bypass w sterownikach Schneider Electric Modicon via brute force Modbus

CVE-2018-7846CRITICAL9.8PL ✓same product

Naruszenie granicy zaufania w sterownikach Schneider Electric Modicon — atak brute force przez Modbus

CVE-2019-6808CRITICAL9.8PL ✓same product

RCE w sterownikach Schneider Electric Modicon przez protokół Modbus

CVE-2019-6815CRITICAL9.1PL ✓same product

Podatność kontroli dostępu w Schneider Electric Modicon Quantum — DoS i modyfikacja konfiguracji PLC