What’s Vulnerable › Vulnerabilities
CVE-2018-7759
- Severity: high (CVSS 7.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-04-18 · updated 2026-06-17
- Weakness: CWE-119
Description
A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified (instead of the buffer size) as the number of bytes to be copied.
Affected products
- Schneider-Electric 140Cpu31110 Firmware: all versions
- Schneider-Electric 140Cpu31110C Firmware: all versions
- Schneider-Electric 140Cpu43412U Firmware: all versions
- Schneider-Electric 140Cpu43412Uc Firmware: all versions
- Schneider-Electric 140Cpu65150 Firmware: all versions
- Schneider-Electric 140Cpu65150C Firmware: all versions
- Schneider-Electric 140Cpu65160 Firmware: all versions
- Schneider-Electric 140Cpu65160C Firmware: all versions
- Schneider-Electric 140Cpu65160S Firmware: all versions
- Schneider-Electric 140Cpu65260 Firmware: all versions
- Schneider-Electric 140Cpu65260C Firmware: all versions
- Schneider-Electric 140Cpu65860 Firmware: all versions
- Schneider-Electric 140Cpu65860C Firmware: all versions
- Schneider-Electric Bmxnor0200 Firmware: all versions
- Schneider Electric SE BMXNOR0200H Ethernet / Serial RTU module: all versions
- Schneider-Electric Modicon M340 Bmxp341000 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp341000H Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp342000 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp3420102 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp3420102Cl Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp342020 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp342020H Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp3420302 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp3420302Cl Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp3420302H Firmware: all versions
- Schneider-Electric Tsxh5724M Firmware: all versions
- Schneider-Electric Tsxh5724Mc Firmware: all versions
- Schneider-Electric Tsxh5744M Firmware: all versions
- Schneider-Electric Tsxh5744Mc Firmware: all versions
- Schneider-Electric Tsxp57104M Firmware: all versions
References
- https://www.schneider-electric.com/en/download/document/SEVD-2018-081-02/
- https://www.schneider-electric.com/en/download/document/SEVD-2018-081-02/
Get alerted when CVE-2018-7759 or the next vulnerability affects your stack