Medium severity6.5NVD Advisory· Published May 22, 2019· Updated Jun 17, 2026

CVE-2018-7851

Description

CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could cause a denial of service to the device that would force a restart to restore availability.

Affected products

Modicon/M580, M340, BMxCRA312xx, Premium, 140CRA312xxxdescription
Schneider Electric/140CRA312xxxllm-create
Range: All firmware versions
Schneider Electric/Modicon M580 CPUllm-fuzzy
Range: <V2.50
Schneider Electric/BMxCRA312xxllm-fuzzy
Range: <V2.40
Schneider Electric/Modicon M340llm-fuzzy
Range: <V3.01
Schneider Electric/Modicon Premiumllm-fuzzy
Range: All firmware versions

Patches

Vulnerability mechanics

References

www.schneider-electric.com/en/download/document/SEVD-2019-134-10/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000