Vulnerability Description
Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior) which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending a specific IPv4 protocol package to Schneider Electric Modicon M218 Logic Controller can cause IPv4 devices to go down. The device does not work properly and must be powered back on to return to normal.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider-Electric | Modicon M218 Firmware | <= 5.0.0.7 |
| Schneider-Electric | Modicon M218 | - |
Related Weaknesses (CWE)
References
- https://www.se.com/ww/en/download/document/SEVD-2020-224-03/Vendor Advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-224-03/Vendor Advisory
FAQ
What is CVE-2020-7524?
CVE-2020-7524 is a vulnerability with a CVSS score of 7.5 (HIGH). Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior) which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending ...
How severe is CVE-2020-7524?
CVE-2020-7524 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7524?
Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Modicon M218 Firmware, Schneider-Electric Modicon M218.