Description
A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum (all versions), which could cause a possible denial of service when reading specific coils and registers in the controller over Modbus.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Schneider Electric SE Modicon M580
firmware version prior to V2.90affected
Schneider Electric SE Modicon M340
firmware version prior to V3.10affected
Schneider Electric SE Modicon Premium
all versionsaffected
Schneider Electric SE Modicon Quantum
all versionsaffected