ZeroHour

CVE-2018-7848

PoC
CVSS 3.1
7.5 high
EPSS
3%p88
Published
()
Modified
Description

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading files from the controller over Modbus

Vendors
schneider-electric
Products
modicon m580 firmware, modicon m340 firmware, modicon quantum firmware, modicon premium firmware
Weakness
CWE-200
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In the news