Vulnerability · Published Jun 16, 2020 · Assigned by schneider
CVE-2020-7502
High 7.5
In plain English
A high-severity out-of-bounds write in Modicon M218 Logic Controller (Firmware version 4.3 and prior). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 75% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.6%top 24.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (Firmware version 4.3 and prior), which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Modicon M218 Logic Controller (Firmware version 4.3 and prior) | Modicon M218 Logic Controller (Firmware version 4.3 and prior) |
Weakness: CWE-787
References
- https://www.se.com/ww/en/download/document/SEVD-2020-161-01 x_refsource_MISC