CVE-2018-7847
CRITICALModicon M580/M340/Quantum/Premium Firmware - DoS & Code Execution via Modbus Overwrite
Title source: llmDescription
A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service or potential code execution by overwriting configuration settings of the controller over Modbus.
References (3)
Core 3
Core References
Vendor Advisory x_refsource_misc
https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
Exploit, Third Party Advisory x_refsource_misc
https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0742
Third Party Advisory x_refsource_misc
https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0743
Scores
CVSS v3
9.8
EPSS
0.0091
EPSS Percentile
76.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-287
Status
published
Products (4)
schneider-electric/modicon_m340_firmware
schneider-electric/modicon_m580_firmware
schneider-electric/modicon_premium_firmware
schneider-electric/modicon_quantum_firmware
Published
May 22, 2019
Tracked Since
Feb 18, 2026