CVE-2018-7794

HIGH

Modicon M580 < 2.80, M340 < 3.01, Quantum/TSX < 3.20 - Denial of Service via Modbus TCP Invalid Index

Title source: llm

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://www.se.com/ww/en/download/document/SEVD-2019-344-01

Scores

CVSS v3 7.5

EPSS 0.0039

EPSS Percentile 60.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-754

Status published

Products (29)

schneider-electric/140cpu65150_firmware < 3.52

schneider-electric/140cpu65160_firmware < 3.52

schneider-electric/140cpu65160s_firmware < 3.52

schneider-electric/140cpu65260_firmware < 3.52

schneider-electric/140cpu65860_firmware < 3.52

schneider-electric/140cpu67060_firmware < 3.52

schneider-electric/140cpu67160_firmware < 3.52

schneider-electric/140cpu67160s_firmware < 3.52

schneider-electric/140cpu67260_firmware < 3.52

schneider-electric/140cpu67261_firmware < 3.52

... and 19 more

Published Jan 06, 2020

Tracked Since Feb 18, 2026