CVE-2018-7851 : CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware pri

CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could cause a denial of service to the device that would force a restart to restore availability.

Published 2019-05-22 20:29:02

Updated 2022-04-19 15:35:23

Source Schneider Electric SE

View at NVD, CVE.org

Vulnerability category: OverflowDenial of service

Exploit prediction scoring system (EPSS) score for CVE-2018-7851

Probability of exploitation activity in the next 30 days: 0.08%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 34 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2018-7851

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.8	MEDIUM	AV:N/AC:L/Au:S/C:N/I:N/A:C	8.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2018-7851

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
Assigned by:
- cybersecurity@se.com (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2018-7851

https://www.schneider-electric.com/en/download/document/SEVD-2019-134-10/

Security Notification - Modicon Controller | Schneider Electric
Vendor Advisory

Products affected by CVE-2018-7851

Schneider-electric » Modicon Premium Firmware
cpe:2.3:o:schneider-electric:modicon_premium_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Modicon Premium » Version: N/A
Schneider-electric » 140cra312xxx Firmware
cpe:2.3:o:schneider-electric:140cra312xxx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cra312xxx » Version: N/A
Schneider-electric » M580 Firmware
Versions before (<) 2.50
cpe:2.3:o:schneider-electric:m580_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmeh582040 » Version: N/A
When used together with: Schneider-electric » Bmeh582040c » Version: N/A
When used together with: Schneider-electric » Bmeh584040 » Version: N/A
When used together with: Schneider-electric » Bmeh584040c » Version: N/A
When used together with: Schneider-electric » Bmeh586040 » Version: N/A
When used together with: Schneider-electric » Bmeh586040c » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep581020 » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep581020h » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep582020 » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep582020h » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep582040 » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep582040h » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep582040s » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep583020 » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep583040 » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep584020 » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep584040 » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep584040s » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep585040 » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep585040c » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep586040 » Version: N/A
When used together with: Schneider-electric » Modicon M580 Bmep586040c » Version: N/A
Schneider-electric » M340 Firmware
Versions before (<) 3.01
cpe:2.3:o:schneider-electric:m340_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp341000 » Version: N/A
When used together with: Schneider-electric » Bmxp341000h » Version: N/A
When used together with: Schneider-electric » Bmxp342000 » Version: N/A
When used together with: Schneider-electric » Bmxp3420102 » Version: N/A
When used together with: Schneider-electric » Bmxp3420102cl » Version: N/A
When used together with: Schneider-electric » Bmxp342020 » Version: N/A
When used together with: Schneider-electric » Bmxp342020h » Version: N/A
When used together with: Schneider-electric » Bmxp3420302 » Version: N/A
When used together with: Schneider-electric » Bmxp3420302cl » Version: N/A
When used together with: Schneider-electric » Bmxp3420302h » Version: N/A
Schneider-electric » Bmx/e Cra Firmware
Versions before (<) 2.40
cpe:2.3:o:schneider-electric:bmx\/e_cra_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxcra31200 » Version: N/A
When used together with: Schneider-electric » Bmxcra31210c » Version: N/A

Vulnerability Details : CVE-2018-7851

Exploit prediction scoring system (EPSS) score for CVE-2018-7851

CVSS scores for CVE-2018-7851

CWE ids for CVE-2018-7851

References for CVE-2018-7851

Products affected by CVE-2018-7851