Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2018-7846

UNKNOWN
Published 2019-05-22T19:57:42
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2018-7846. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed CRITICAL

GHSA-hvj5-x43r-qg3f

Advisory Details

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller.

CVSS Scoring

CVSS Score

9.0

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2018-7846
WEB https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11
WEB https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0735

Advisory provided by GitHub Security Advisory Database. Published: May 24, 2022, Modified: May 24, 2022

References

https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0735
Published: 2019-05-22T19:57:42
Last Modified: 2024-08-05T06:37:59.620Z
Copied to clipboard!