CVE-2018-7838

Published: Jul 15, 2019Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FTP CWD command with a data length greater than 1020 bytes. A power cycle is then needed to reactivate the FTP service.

Affected (13)

Products: Schneider Electric: Bmenoc0301 Firmware, Modicon M580 Bmep584040 Firmware, Modicon M580 Bmep586040 Firmware, Bmeh586040 Firmware, Modicon M580 Bmep581020 Firmware, Modicon M580 Bmep582020 Firmware, Modicon M580 Bmep582040 Firmware, Modicon M580 Bmep583020 Firmware, Modicon M580 Bmep583040 Firmware, Modicon M580 Bmep584020 Firmware, Modicon M580 Bmep585040 Firmware, Modicon M580 Bmep582040s Firmware, Bmeh582040 Firmware

Schneider Electric

13 products

Bmenoc0301 Firmware

Modicon M580 Bmep584040 Firmware

Modicon M580 Bmep586040 Firmware

Bmeh586040 Firmware

Modicon M580 Bmep581020 Firmware

Modicon M580 Bmep582020 Firmware

Modicon M580 Bmep582040 Firmware

Modicon M580 Bmep583020 Firmware

Modicon M580 Bmep583040 Firmware

Modicon M580 Bmep584020 Firmware

Modicon M580 Bmep585040 Firmware

Modicon M580 Bmep582040s Firmware

Bmeh582040 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Bmenoc0301 Firmware	Before 2.16

Running on/with	Platform Versions
Schneider Electric Bmenoc0301	All versions

Configuration B

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep584040 Firmware	Before 2.90

Running on/with	Platform Versions
Schneider Electric Bmeh584040	All versions
Schneider Electric Bmeh584040c	All versions
Schneider Electric Modicon M580 Bmep584040	All versions
Schneider Electric Modicon M580 Bmep584040s	All versions

Configuration C

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep586040 Firmware	Before 2.90

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep586040	All versions
Schneider Electric Modicon M580 Bmep586040c	All versions

Configuration D

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Schneider Electric Bmeh586040 Firmware	Before 2.90

Running on/with	Platform Versions
Schneider Electric Bmeh586040	All versions
Schneider Electric Bmeh586040c	All versions

Configuration E

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep581020 Firmware	Before 2.90

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep581020	All versions
Schneider Electric Modicon M580 Bmep581020h	All versions

Configuration F

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582020 Firmware	Before 2.90

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582020	All versions
Schneider Electric Modicon M580 Bmep582020h	All versions

Configuration G

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582040 Firmware	Before 2.90

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582040	All versions
Schneider Electric Modicon M580 Bmep582040h	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep583020 Firmware	Before 2.90

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep583020	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep583040 Firmware	Before 2.90

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep583040	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep584020 Firmware	Before 2.90

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep584020	All versions

Configuration K

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep585040 Firmware	Before 2.90

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep585040	All versions
Schneider Electric Modicon M580 Bmep585040c	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582040s Firmware	Before 2.90

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582040s	All versions

Configuration M

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Schneider Electric Bmeh582040 Firmware	Before 2.90

Running on/with	Platform Versions
Schneider Electric Bmeh582040	All versions
Schneider Electric Bmeh582040c	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-03

Source: cybersecurity@se.com

Vendor Advisory

https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-03

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.