Schneider Electric Modicon M218 Logic Controller up to 5.0.0.7 IPv4 Packet out-of-bounds write

Summaryinfo

A vulnerability was found in Schneider Electric Modicon M218 Logic Controller up to 5.0.0.7. It has been rated as problematic. Affected is an unknown function of the component IPv4 Packet Handler. This manipulation causes out-of-bounds write. The identification of this vulnerability is CVE-2020-7524. It is possible to initiate the attack remotely. There is no exploit available.

Detailsinfo

A vulnerability classified as problematic was found in Schneider Electric Modicon M218 Logic Controller up to 5.0.0.7 (SCADA Software). Affected by this vulnerability is an unknown function of the component IPv4 Packet Handler. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. The CWE definition for the vulnerability is CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect availability. The summary by CVE is:

Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior) which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending a specific IPv4 protocol package to Schneider Electric Modicon M218 Logic Controller can cause IPv4 devices to go down. The device does not work properly and must be powered back on to return to normal.

The weakness was shared 08/31/2020 (Website). The advisory is shared at se.com. This vulnerability is known as CVE-2020-7524 since 01/21/2020. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• SCADA Software

Vendor

• Schneider Electric

Name

• Modicon M218 Logic Controller

Version

• 5.0.0.0
• 5.0.0.1
• 5.0.0.2
• 5.0.0.3
• 5.0.0.4
• 5.0.0.5
• 5.0.0.6
• 5.0.0.7

License

• commercial

Website

• Vendor: https://www.schneider-electric.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion