CVE-2018-7794: schneider electric se modicon m580, modicon m340, modicon quantum, modicon premium (see security notification for specific versions)

Vulnerability summary

CVE-2018-7794 is a high (CVSS 7.5) vulnerability in schneider electric se modicon m580, modicon m340, modicon quantum, modicon premium (see security notification for specific versions). EPSS estimates a 1.40% chance of exploitation in the next 30 days, higher than 72% of scored vulnerabilities.

Timeline

1. 06-01-2020
   PublishedVulnerability first disclosed.
2. 29-05-2026
   Last modifiedVulnerability information updated.

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.

• CWE-754Improper Check for Unusual or Exceptional ConditionsThe product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.