CVE-2018-7794

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-01-06 · updated 2026-06-17
Weakness: CWE-754

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.

Affected products

Schneider-Electric 140Cpu65150 Firmware: before 3.52 — fixed in 3.52
Schneider-Electric 140Cpu65160 Firmware: before 3.52 — fixed in 3.52
Schneider-Electric 140Cpu65160S Firmware: before 3.52 — fixed in 3.52
Schneider-Electric 140Cpu65260 Firmware: before 3.52 — fixed in 3.52
Schneider-Electric 140Cpu65860 Firmware: before 3.52 — fixed in 3.52
Schneider-Electric 140Cpu67060 Firmware: before 3.52 — fixed in 3.52
Schneider-Electric 140Cpu67160 Firmware: before 3.52 — fixed in 3.52
Schneider-Electric 140Cpu67160S Firmware: before 3.52 — fixed in 3.52
Schneider-Electric 140Cpu67260 Firmware: before 3.52 — fixed in 3.52
Schneider-Electric 140Cpu67261 Firmware: before 3.52 — fixed in 3.52
Schneider-Electric 140Cpu67861 Firmware: before 3.52 — fixed in 3.52
Schneider-Electric Modicon M340 Firmware: before 3.01 — fixed in 3.01
Schneider Electric SE Modicon M580: before 2.80 — fixed in 2.80
Schneider-Electric Tsxh5724M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxh5744M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxp57104M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxp57154M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxp571634M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxp57204M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxp57254M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxp572634M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxp57304M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxp57354M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxp573634M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxp57454M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxp574634M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxp57554M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxp575634M Firmware: before 3.20 — fixed in 3.20
Schneider-Electric Tsxp576634M Firmware: before 3.20 — fixed in 3.20

How to fix

Upgrade to a fixed version: Schneider-Electric 140Cpu65150 Firmware 3.52; Schneider-Electric 140Cpu65160 Firmware 3.52; Schneider-Electric 140Cpu65160S Firmware 3.52; Schneider-Electric 140Cpu65260 Firmware 3.52; Schneider-Electric 140Cpu65860 Firmware 3.52; Schneider-Electric 140Cpu67060 Firmware 3.52; Schneider-Electric 140Cpu67160 Firmware 3.52; Schneider-Electric 140Cpu67160S Firmware 3.52; Schneider-Electric 140Cpu67260 Firmware 3.52; Schneider-Electric 140Cpu67261 Firmware 3.52; Schneider-Electric 140Cpu67861 Firmware 3.52; Schneider-Electric Modicon M340 Firmware 3.01. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-7794 or the next vulnerability affects your stack