1. Home
  2. CVE Database
  3. CVE-2018-7853
HIGH · 7.5

CVE-2018-7853

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid phys...

Vulnerability Description

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid physical memory blocks in the controller over Modbus

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
Schneider-ElectricModicon Premium Firmware-
Schneider-ElectricModicon Premium-
Schneider-ElectricModicon Quantum Firmware-
Schneider-ElectricModicon Quantum-
Schneider-ElectricModicon M340 Firmware< 3.10
Schneider-ElectricModicon M340-
Schneider-ElectricModicon M580 Firmware< 2.90
Schneider-ElectricModicon M580-

Related Weaknesses (CWE)

CWE-754

References

FAQ

What is CVE-2018-7853?

CVE-2018-7853 is a vulnerability with a CVSS score of 7.5 (HIGH). A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid phys...

How severe is CVE-2018-7853?

CVE-2018-7853 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-7853?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Modicon Premium Firmware, Schneider-Electric Modicon Premium, Schneider-Electric Modicon Quantum Firmware, Schneider-Electric Modicon Quantum, Schneider-Electric Modicon M340 Firmware.