ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-7543

—
CVSS 3.1
7.5 high
EPSS
1%p70
Published
()
Modified
Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.

Vendors
schneider-electric
Products
modicon m580 bmep584040 firmware, modicon m580 bmep582040 firmware, modicon m580 bmep586040 firmware, modicon m580 bmep585040 firmware, modicon m580 bmep582020 firmware, modicon m580 bmep581020 firmware, modicon m580 bmep584020 firmware, modicon m580 bmep583040 firmware, modicon m580 bmep583020 firmware, modicon m340 bmxp341000 firmware, modicon m340 bmxp342000 firmware, modicon m340 bmxp3420102 firmware
Weakness
CWE-754
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news

No ingested article mentions this CVE yet.