VULNERABILITY INTELLIGENCE

CVE-2018-7844

CVSS score7.5 HIGH

EPSS probability3.28%

CISA KEVNot currently listed

Published2019-05-22

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading memory blocks from the controller over Modbus.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

cybersecurity@se.com — Mitigation, Vendor Advisory
cybersecurity@se.com — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory