CVE-2020-7502

HIGH

Modicon M218 Firmware < 4.3 - Denial of Service via Crafted TCP/IP Packets

Title source: llm
STIX 2.1

Description

A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (Firmware version 4.3 and prior), which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller.

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0019
EPSS Percentile 40.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-787
Status published
Products (1)
schneider-electric/modicon_m218_firmware < 4.3
Published Jun 16, 2020
Tracked Since Feb 18, 2026