High severity · published Apr 18, 2018
CVE-2018-7759
A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200
7.5
CVSS
1.3%
EPSS
No
On KEV
Description
A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified (instead of the buffer size) as the number of bytes to be copied.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
1F
140cpu31110 Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu31110c Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu43412u Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu43412uc Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65150 Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65150c Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65160 Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65160c Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65160s Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65260 Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65260c Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65860 Firmware · Schneider-electric
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-7759
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-7759
Vendor Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2018-081-02/
More from 140cpu31110 Firmware
9.8
CVE-2018-7761
A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution
9.8
CVE-2018-7760
An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200
9.8
CVE-2018-7242
Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules
9.8
CVE-2018-7241
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules
8.8
CVE-2018-7240
A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution