Not rated
CVE-2018-7842 A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340,…
Description
A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause an elevation of privilege by conducting a brute force attack on Modbus parameters sent to the controller.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Modicon M580 Modicon M340 Modicon Quantum Modicon Premium | Versions not published |
References
- www.schneider-electric.com www.schneider-electric.com
- www.talosintelligence.com www.talosintelligence.com
Timeline
- Published
- Last modified
Other CVEs of Modicon M580 Modicon M340 Modicon Quantum Modicon Premium
The 18 CVEs of Modicon M580 Modicon M340 Modicon Quantum Modicon Premium →
CVE-2018-7844
A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum,…
Not rated
CVE-2019-6808
A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon…
Not rated
CVE-2019-6807
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum,…
Not rated
CVE-2019-6806
A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum,…
Not rated