Details of VAR-201905-1033

ID

VAR-201905-1033

CVE

CVE-2018-7851

TITLE

plural Modicon Product buffer error vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2018-015472

DESCRIPTION

CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could cause a denial of service to the device that would force a restart to restore availability. plural Modicon The product contains a buffer error vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. Schneider Electric Modicon M580 and others are products of Schneider Electric, France. The Schneider Electric Modicon M580 is a programmable automation controller. Schneider Electric Modicon Premium is a large programmable logic controller (PLC) for discrete or process applications. Schneider Electric Modicon M340 is a medium-range PLC (Programmable Logic Controller) for industrial processes and infrastructure. A buffer overflow vulnerability exists in several Schneider Electric products that can be exploited by an attacker to cause a buffer overflow or heap overflow. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations

Trust: 2.43

sources: NVD: CVE-2018-7851 // JVNDB: JVNDB-2018-015472 // CNVD: CNVD-2019-15197 // IVD: 7f337d34-58c3-4e10-a083-c50e708af9ed // VULHUB: VHN-137883

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: 7f337d34-58c3-4e10-a083-c50e708af9ed // CNVD: CNVD-2019-15197

AFFECTED PRODUCTS

vendor:	schneider electric	model:	m580	scope:	lt	version:	2.50	Trust: 1.0
vendor:	schneider electric	model:	modicon premium	scope:	eq	version:	*	Trust: 1.0
vendor:	schneider electric	model:	bmx\/e cra	scope:	lt	version:	2.40	Trust: 1.0
vendor:	schneider electric	model:	140cra312xxx	scope:	eq	version:	*	Trust: 1.0
vendor:	schneider electric	model:	m340	scope:	lt	version:	3.01	Trust: 1.0
vendor:	schneider electric	model:	140cra312xxx	scope:	-	version:	-	Trust: 0.8
vendor:	schneider electric	model:	bmxcra312xx	scope:	lt	version:	2.40	Trust: 0.8
vendor:	schneider electric	model:	modicon m340	scope:	lt	version:	3.01	Trust: 0.8
vendor:	schneider electric	model:	modicon m580	scope:	lt	version:	2.50	Trust: 0.8
vendor:	schneider electric	model:	modicon premium plc	scope:	-	version:	-	Trust: 0.8
vendor:	schneider	model:	electric modicon premium	scope:	-	version:	-	Trust: 0.6
vendor:	schneider	model:	electric 140cra312xxx	scope:	-	version:	-	Trust: 0.6
vendor:	schneider	model:	electric modicon m580	scope:	lt	version:	v2.50	Trust: 0.6
vendor:	schneider	model:	electric bmxcra312xx	scope:	lt	version:	v2.40	Trust: 0.6
vendor:	schneider	model:	electric modicon m340	scope:	lt	version:	v3.01	Trust: 0.6
vendor:	m580	model:	-	scope:	eq	version:	*	Trust: 0.2
vendor:	m340	model:	-	scope:	eq	version:	*	Trust: 0.2
vendor:	bmx e cra	model:	-	scope:	eq	version:	*	Trust: 0.2
vendor:	modicon premium	model:	-	scope:	eq	version:	*	Trust: 0.2
vendor:	140cra312xxx	model:	-	scope:	eq	version:	*	Trust: 0.2

sources: IVD: 7f337d34-58c3-4e10-a083-c50e708af9ed // CNVD: CNVD-2019-15197 // JVNDB: JVNDB-2018-015472 // NVD: CVE-2018-7851

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-7851
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2018-7851
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2019-15197
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201905-924
value:	MEDIUM
Trust: 0.6
IVD:	7f337d34-58c3-4e10-a083-c50e708af9ed
value:	MEDIUM
Trust: 0.2
VULHUB:	VHN-137883
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2018-7851
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:L/AU:S/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2019-15197
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:L/AU:S/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	7f337d34-58c3-4e10-a083-c50e708af9ed
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:L/AU:S/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2
VULHUB:	VHN-137883
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:L/AU:S/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2018-7851
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	3.6
version:	3.1
Trust: 1.0
NVD:	CVE-2018-7851
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: IVD: 7f337d34-58c3-4e10-a083-c50e708af9ed // CNVD: CNVD-2019-15197 // VULHUB: VHN-137883 // JVNDB: JVNDB-2018-015472 // CNNVD: CNNVD-201905-924 // NVD: CVE-2018-7851

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-137883 // JVNDB: JVNDB-2018-015472 // NVD: CVE-2018-7851

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201905-924

TYPE

Buffer error

Trust: 0.8

sources: IVD: 7f337d34-58c3-4e10-a083-c50e708af9ed // CNNVD: CNNVD-201905-924

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-015472

PATCH

title:	SEVD-2019-134-10	url:	https://www.schneider-electric.com/en/download/document/SEVD-2019-134-10/	Trust: 0.8
title:	Patch for multiple Schneider Electric product buffer overflow vulnerabilities (CNVD-2019-15197)	url:	https://www.cnvd.org.cn/patchInfo/show/162069	Trust: 0.6
title:	Multiple Schneider Electric Product Buffer Error Vulnerability Fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=92893	Trust: 0.6

sources: CNVD: CNVD-2019-15197 // JVNDB: JVNDB-2018-015472 // CNNVD: CNNVD-201905-924

EXTERNAL IDS

db:	NVD	id:	CVE-2018-7851	Trust: 3.3
db:	SCHNEIDER	id:	SEVD-2019-134-10	Trust: 2.3
db:	CNNVD	id:	CNNVD-201905-924	Trust: 0.9
db:	CNVD	id:	CNVD-2019-15197	Trust: 0.8
db:	JVNDB	id:	JVNDB-2018-015472	Trust: 0.8
db:	IVD	id:	7F337D34-58C3-4E10-A083-C50E708AF9ED	Trust: 0.2
db:	VULHUB	id:	VHN-137883	Trust: 0.1

sources: IVD: 7f337d34-58c3-4e10-a083-c50e708af9ed // CNVD: CNVD-2019-15197 // VULHUB: VHN-137883 // JVNDB: JVNDB-2018-015472 // CNNVD: CNNVD-201905-924 // NVD: CVE-2018-7851

REFERENCES

url:	https://www.schneider-electric.com/en/download/document/sevd-2019-134-10/	Trust: 2.3
url:	https://nvd.nist.gov/vuln/detail/cve-2018-7851	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7851	Trust: 0.8
url:	https://web.nvd.nist.gov//vuln/detail/cve-2018-7851	Trust: 0.6

sources: CNVD: CNVD-2019-15197 // VULHUB: VHN-137883 // JVNDB: JVNDB-2018-015472 // CNNVD: CNNVD-201905-924 // NVD: CVE-2018-7851

SOURCES

db:	IVD	id:	7f337d34-58c3-4e10-a083-c50e708af9ed
db:	CNVD	id:	CNVD-2019-15197
db:	VULHUB	id:	VHN-137883
db:	JVNDB	id:	JVNDB-2018-015472
db:	CNNVD	id:	CNNVD-201905-924
db:	NVD	id:	CVE-2018-7851

LAST UPDATE DATE

2024-11-23T21:37:17.620000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2019-15197	date:	2019-05-24T00:00:00
db:	VULHUB	id:	VHN-137883	date:	2019-10-09T00:00:00
db:	JVNDB	id:	JVNDB-2018-015472	date:	2019-06-07T00:00:00
db:	CNNVD	id:	CNNVD-201905-924	date:	2019-05-24T00:00:00
db:	NVD	id:	CVE-2018-7851	date:	2024-11-21T04:12:52.710

SOURCES RELEASE DATE

db:	IVD	id:	7f337d34-58c3-4e10-a083-c50e708af9ed	date:	2019-05-24T00:00:00
db:	CNVD	id:	CNVD-2019-15197	date:	2019-05-24T00:00:00
db:	VULHUB	id:	VHN-137883	date:	2019-05-22T00:00:00
db:	JVNDB	id:	JVNDB-2018-015472	date:	2019-06-07T00:00:00
db:	CNNVD	id:	CNNVD-201905-924	date:	2019-05-22T00:00:00
db:	NVD	id:	CVE-2018-7851	date:	2019-05-22T20:29:01.853