Vulnerabilities > CVE-2018-7846 - Exposure of Resource to Wrong Sphere vulnerability in Schneider-Electric products

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
schneider-electric
CWE-668

Summary

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller.

Common Weakness Enumeration (CWE)

Talos

idTALOS-2018-0735
last seen2019-06-10
published2019-06-10
reporterTalos Intelligence
sourcehttp://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0735
titleSchneider Electric Modicon M580 UMAS release reservation denial-of-service vulnerability