CVE-2020-7537

Published: Dec 11, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.

Affected (19)

Products: Schneider Electric: Modicon M580 Bmep584040 Firmware, Modicon M580 Bmep582040 Firmware, Modicon M580 Bmep586040 Firmware, Modicon M580 Bmep585040 Firmware, Modicon M580 Bmep582020 Firmware, Modicon M580 Bmep581020 Firmware, Modicon M580 Bmep584020 Firmware, Modicon M580 Bmep583040 Firmware, Modicon M580 Bmep583020 Firmware, Modicon M340 Bmxp341000 Firmware, Modicon M340 Bmxp342000 Firmware, Modicon M340 Bmxp3420102 Firmware, Modicon M340 Bmxp3420102cl Firmware, Modicon M340 Bmxp342020 Firmware, Modicon M340 Bmxp3420302 Firmware, Modicon M340 Bmxp3420302cl Firmware, Tsxp574634 Firmware, Tsxp575634 Firmware, Tsxp576634 Firmware

Schneider Electric

19 products

Modicon M580 Bmep584040 Firmware

Modicon M580 Bmep582040 Firmware

Modicon M580 Bmep586040 Firmware

Modicon M580 Bmep585040 Firmware

Modicon M580 Bmep582020 Firmware

Modicon M580 Bmep581020 Firmware

Modicon M580 Bmep584020 Firmware

Modicon M580 Bmep583040 Firmware

Modicon M580 Bmep583020 Firmware

Modicon M340 Bmxp341000 Firmware

Modicon M340 Bmxp342000 Firmware

Modicon M340 Bmxp3420102 Firmware

Modicon M340 Bmxp3420102cl Firmware

Modicon M340 Bmxp342020 Firmware

Modicon M340 Bmxp3420302 Firmware

Modicon M340 Bmxp3420302cl Firmware

Tsxp574634 Firmware

Tsxp575634 Firmware

Tsxp576634 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep584040 Firmware	Before 3.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep584040	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582040 Firmware	Before 3.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582040	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep586040 Firmware	Before 3.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep586040	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep585040 Firmware	Before 3.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep585040	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep582020 Firmware	Before 3.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep582020	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep581020 Firmware	Before 3.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep581020	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep584020 Firmware	Before 3.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep584020	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep583040 Firmware	Before 3.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep583040	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmep583020 Firmware	Before 3.20

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmep583020	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp341000 Firmware	Before 3.30

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp341000	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342000 Firmware	Before 3.30

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342000	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420102 Firmware	Before 3.30

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420102	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420102cl Firmware	Before 3.30

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420102cl	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342020 Firmware	Before 3.30

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342020	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302 Firmware	Before 3.30

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302cl Firmware	Before 3.30

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302cl	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp574634 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp574634	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp575634 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp575634	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp576634 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp576634	All versions

Related CWEs

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (2)

https://www.se.com/ww/en/download/document/SEVD-2020-343-08/

Source: cybersecurity@se.com

Vendor Advisory

https://www.se.com/ww/en/download/document/SEVD-2020-343-08/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.