VULNERABILITY INTELLIGENCE

CVE-2018-7846

CVSS score9.8 CRITICAL
EPSS probability29.58%
CISA KEVNot currently listed
Published2019-05-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller.

Weakness classification

  • CWE-668: Exposure of Resource to Wrong Sphere

Primary references