ZeroHour

CVE-2018-7794

CVSS 3.1
7.5 high
EPSS
1%p71
Published
()
Modified
Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.

Vendors
schneider-electric
Products
modicon m580 firmware, modicon m340 firmware, tsxh5744m firmware, tsxh5724m firmware, tsxp576634m firmware, tsxp57554m firmware, tsxp575634m firmware, tsxp57454m firmware, tsxp574634m firmware, tsxp57354m firmware, tsxp573634m firmware, tsxp57304m firmware
Weakness
CWE-754
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news