Details of VAR-201905-1046

ID

VAR-201905-1046

CVE

CVE-2018-7843

TITLE

plural Modicon Resource management vulnerabilities in products

Trust: 0.8

sources: JVNDB: JVNDB-2018-015477

DESCRIPTION

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading memory blocks with an invalid data size or with an invalid data offset in the controller over Modbus. plural Modicon The product contains a resource management vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. Schneider Electric Modicon M580 and other products are products of Schneider Electric (France). Schneider Electric Modicon M580 is a programmable automation controller. Schneider Electric Modicon Premium is a large programmable logic controller (PLC) for discrete or process applications. Schneider Electric Modicon Quantum is a large programmable logic controller (PLC) for process applications, high availability and safety solutions. Multiple Schneider Electric products have resource management bugs. An attacker could use this vulnerability to cause a denial of service. The following products and versions are affected: Schneider Electric Modicon M580 (all versions); Modicon M340 (all versions); Modicon Quantum (all versions); Modicon Premium (all versions)

Trust: 2.52

sources: NVD: CVE-2018-7843 // JVNDB: JVNDB-2018-015477 // CNVD: CNVD-2019-34830 // IVD: f0fc6464-0d4f-4dbd-86b8-5715c11b44c9 // VULHUB: VHN-137875 // VULMON: CVE-2018-7843

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: f0fc6464-0d4f-4dbd-86b8-5715c11b44c9 // CNVD: CNVD-2019-34830

AFFECTED PRODUCTS

vendor:	schneider electric	model:	modicon premium	scope:	eq	version:	*	Trust: 1.0
vendor:	schneider electric	model:	modicon quantum	scope:	eq	version:	*	Trust: 1.0
vendor:	schneider electric	model:	modicon m580	scope:	eq	version:	*	Trust: 1.0
vendor:	schneider electric	model:	modicon m340	scope:	eq	version:	*	Trust: 1.0
vendor:	schneider electric	model:	modicon m340	scope:	-	version:	-	Trust: 0.8
vendor:	schneider electric	model:	modicon m580	scope:	-	version:	-	Trust: 0.8
vendor:	schneider electric	model:	modicon premium plc	scope:	-	version:	-	Trust: 0.8
vendor:	schneider electric	model:	modicon quantum plc	scope:	-	version:	-	Trust: 0.8
vendor:	schneider	model:	electric modicon m340	scope:	-	version:	-	Trust: 0.6
vendor:	schneider	model:	electric modicon m580	scope:	-	version:	-	Trust: 0.6
vendor:	schneider	model:	electric modicon premium	scope:	-	version:	-	Trust: 0.6
vendor:	schneider	model:	electric modicon quantum	scope:	-	version:	-	Trust: 0.6
vendor:	modicon m580	model:	-	scope:	eq	version:	*	Trust: 0.2
vendor:	modicon m340	model:	-	scope:	eq	version:	*	Trust: 0.2
vendor:	modicon quantum	model:	-	scope:	eq	version:	*	Trust: 0.2
vendor:	modicon premium	model:	-	scope:	eq	version:	*	Trust: 0.2

sources: IVD: f0fc6464-0d4f-4dbd-86b8-5715c11b44c9 // CNVD: CNVD-2019-34830 // JVNDB: JVNDB-2018-015477 // NVD: CVE-2018-7843

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-7843
value:	HIGH
Trust: 1.0
NVD:	CVE-2018-7843
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2019-34830
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201905-917
value:	HIGH
Trust: 0.6
IVD:	f0fc6464-0d4f-4dbd-86b8-5715c11b44c9
value:	HIGH
Trust: 0.2
VULHUB:	VHN-137875
value:	MEDIUM
Trust: 0.1
VULMON:	CVE-2018-7843
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2018-7843
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
CNVD:	CNVD-2019-34830
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	f0fc6464-0d4f-4dbd-86b8-5715c11b44c9
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2
VULHUB:	VHN-137875
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2018-7843
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.1
Trust: 1.0
NVD:	CVE-2018-7843
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: IVD: f0fc6464-0d4f-4dbd-86b8-5715c11b44c9 // CNVD: CNVD-2019-34830 // VULHUB: VHN-137875 // VULMON: CVE-2018-7843 // JVNDB: JVNDB-2018-015477 // CNNVD: CNNVD-201905-917 // NVD: CVE-2018-7843

PROBLEMTYPE DATA

problemtype:	CWE-125	Trust: 1.1
problemtype:	CWE-399	Trust: 0.9

sources: VULHUB: VHN-137875 // JVNDB: JVNDB-2018-015477 // NVD: CVE-2018-7843

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201905-917

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201905-917

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-015477

PATCH

title:	SEVD-2019-134-11	url:	https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/	Trust: 0.8
title:	-	url:	https://github.com/yanissec/CVE-2018-7843	Trust: 0.1

sources: VULMON: CVE-2018-7843 // JVNDB: JVNDB-2018-015477

EXTERNAL IDS

db:	NVD	id:	CVE-2018-7843	Trust: 3.4
db:	SCHNEIDER	id:	SEVD-2019-134-11	Trust: 1.8
db:	TALOS	id:	TALOS-2018-0738	Trust: 1.8
db:	CNNVD	id:	CNNVD-201905-917	Trust: 0.9
db:	CNVD	id:	CNVD-2019-34830	Trust: 0.8
db:	JVNDB	id:	JVNDB-2018-015477	Trust: 0.8
db:	IVD	id:	F0FC6464-0D4F-4DBD-86B8-5715C11B44C9	Trust: 0.2
db:	VULHUB	id:	VHN-137875	Trust: 0.1
db:	VULMON	id:	CVE-2018-7843	Trust: 0.1

REFERENCES

url:	https://nvd.nist.gov/vuln/detail/cve-2018-7843	Trust: 2.0
url:	https://www.schneider-electric.com/en/download/document/sevd-2019-134-11/	Trust: 1.8
url:	https://www.talosintelligence.com/vulnerability_reports/talos-2018-0738	Trust: 1.8
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7843	Trust: 0.8
url:	https://talosintelligence.com/vulnerability_reports/talos-2018-0738	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/125.html	Trust: 0.1
url:	https://github.com/yanissec/cve-2018-7843	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: CNVD: CNVD-2019-34830 // VULHUB: VHN-137875 // VULMON: CVE-2018-7843 // JVNDB: JVNDB-2018-015477 // CNNVD: CNNVD-201905-917 // NVD: CVE-2018-7843

CREDITS

Discovered by Jared Rittle of Cisco Talos.

Trust: 0.6

sources: CNNVD: CNNVD-201905-917

SOURCES

db:	IVD	id:	f0fc6464-0d4f-4dbd-86b8-5715c11b44c9
db:	CNVD	id:	CNVD-2019-34830
db:	VULHUB	id:	VHN-137875
db:	VULMON	id:	CVE-2018-7843
db:	JVNDB	id:	JVNDB-2018-015477
db:	CNNVD	id:	CNNVD-201905-917
db:	NVD	id:	CVE-2018-7843

LAST UPDATE DATE

2024-11-23T21:52:12.883000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2019-34830	date:	2019-10-12T00:00:00
db:	VULHUB	id:	VHN-137875	date:	2020-08-24T00:00:00
db:	VULMON	id:	CVE-2018-7843	date:	2022-02-03T00:00:00
db:	JVNDB	id:	JVNDB-2018-015477	date:	2019-06-07T00:00:00
db:	CNNVD	id:	CNNVD-201905-917	date:	2022-02-07T00:00:00
db:	NVD	id:	CVE-2018-7843	date:	2024-11-21T04:12:51.810

SOURCES RELEASE DATE

db:	IVD	id:	f0fc6464-0d4f-4dbd-86b8-5715c11b44c9	date:	2019-10-12T00:00:00
db:	CNVD	id:	CNVD-2019-34830	date:	2019-10-11T00:00:00
db:	VULHUB	id:	VHN-137875	date:	2019-05-22T00:00:00
db:	VULMON	id:	CVE-2018-7843	date:	2019-05-22T00:00:00
db:	JVNDB	id:	JVNDB-2018-015477	date:	2019-06-07T00:00:00
db:	CNNVD	id:	CNNVD-201905-917	date:	2019-05-22T00:00:00
db:	NVD	id:	CVE-2018-7843	date:	2019-05-22T20:29:01.590