CVE-2020-7542: schneider-electric modicon_m340_bmxp341000_firmware

Vulnerability summary

CVE-2020-7542 is a high (CVSS 7.5) vulnerability in schneider-electric modicon_m340_bmxp341000_firmware. EPSS estimates a 1.34% chance of exploitation in the next 30 days, higher than 70.8% of scored vulnerabilities.

Timeline

1. 11-12-2020
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.

• CWE-754Improper Check for Unusual or Exceptional ConditionsThe product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.