1. Home
  2. CVE Database
  3. CVE-2018-7759
HIGH · 7.5

CVE-2018-7759

A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source s...

Vulnerability Description

A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified (instead of the buffer size) as the number of bytes to be copied.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
Schneider-ElectricBmxnor0200 Firmware-
Schneider-ElectricBmxnor0200-
Schneider-ElectricBmxnor0200H Firmware-
Schneider-ElectricBmxnor0200H-
Schneider-Electric140Cpu65150 Firmware-
Schneider-Electric140Cpu65150-
Schneider-Electric140Cpu31110 Firmware-
Schneider-Electric140Cpu31110-
Schneider-Electric140Cpu43412U Firmware-
Schneider-Electric140Cpu43412U-
Schneider-Electric140Cpu65160 Firmware-
Schneider-Electric140Cpu65160-
Schneider-Electric140Cpu65260 Firmware-
Schneider-Electric140Cpu65260-
Schneider-Electric140Cpu65860 Firmware-
Schneider-Electric140Cpu65860-
Schneider-Electric140Cpu65160S Firmware-
Schneider-Electric140Cpu65160S-
Schneider-Electric140Cpu65150C Firmware-
Schneider-Electric140Cpu65150C-

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2018-7759?

CVE-2018-7759 is a vulnerability with a CVSS score of 7.5 (HIGH). A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source s...

How severe is CVE-2018-7759?

CVE-2018-7759 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-7759?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Bmxnor0200 Firmware, Schneider-Electric Bmxnor0200, Schneider-Electric Bmxnor0200H Firmware, Schneider-Electric Bmxnor0200H, Schneider-Electric 140Cpu65150 Firmware.