PoC Index

CVE-2018-7848

HIGH 7.5EPSS 3.4%

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading files from the controller over Modbus

CVSS v3.1
7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
3.41% chance of exploitation in the next 30 days, 88th percentile
Published
2019-05-22
Updated
2024-08-05

Proof-of-concept exploits (2)

References

Related