High ICSA-20-016-01 3 CVEs

Schneider Electric Modicon Controllers (Update A)

Published Jan 16, 2020 · Updated Mar 31, 2020 · Revision 2

Vendor: Schneider Electric Product: Modicon M340 Product: Modicon M580 Product: Modicon Premium Product: Modicon Quantum

Summary

Successful exploitation of this vulnerability could result in a denial-of-service condition.

Vulnerabilities 3

High 7.5

CVE-2018-7794

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Mod…

Schneider Electric Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) ICS / OT

Jan 6, 2020
High 7.5

CVE-2019-6856

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Mod…

Schneider Electric Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) ICS / OT

Jan 6, 2020
High 7.5

CVE-2019-6857

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Mod…

Schneider Electric Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) ICS / OT

Jan 6, 2020

Revision history

2020-03-31 #2
ICSA-20-016-01 Schneider Electric Modicon Controllers (Update A)
2020-01-16 #1
ICSA-20-016-01 Schneider Electric Modicon Controllers

References

ICS Advisory ICSA-20-016-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-016-01
Recommended Practices
https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B