CVE-2018-7838
Estado: ModificadaAlta (7.5)—
A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FTP CWD command with a data length greater than 1020 bytes. A power cycle is then needed to reactivate the FTP service.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.12%
- Percentil entre todas las CVEs puntuadas: 65
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (13)
Schneider-electric — Bmeh582040 FirmwareSchneider-electric — Bmeh586040 FirmwareSchneider-electric — Bmenoc0301 FirmwareSchneider-electric — Modicon M580 Bmep581020 FirmwareSchneider-electric — Modicon M580 Bmep582020 FirmwareSchneider-electric — Modicon M580 Bmep582040 FirmwareSchneider-electric — Modicon M580 Bmep582040s FirmwareSchneider-electric — Modicon M580 Bmep583020 FirmwareSchneider-electric — Modicon M580 Bmep583040 FirmwareSchneider-electric — Modicon M580 Bmep584020 FirmwareSchneider-electric — Modicon M580 Bmep584040 FirmwareSchneider-electric — Modicon M580 Bmep585040 FirmwareSchneider-electric — Modicon M580 Bmep586040 Firmware
CWE
- CWE-119
- CWE-119
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-7838",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "cybersecurity@se.com",
"affectedData": [
{
"vendor": "Modicon",
"product": "Modicon M580 CPU - BMEP582040 all versions before V2.90 and Modicon Ethernet Module BMENOC0301 all versions before V2.16",
"versions": [
{
"status": "affected",
"version": "Modicon M580 CPU - BMEP582040 all versions before V2.90 and Modicon Ethernet Module BMENOC0301 all versions before V2.16"
}
]
}
]
}
],
"published": "2019-07-15T21:15:10.477",
"references": [
{
"url": "https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-03",
"tags": [
"Vendor Advisory"
],
"source": "cybersecurity@se.com"
},
{
"url": "https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-03",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "cybersecurity@se.com",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FTP CWD command with a data length greater than 1020 bytes. A power cycle is then needed to reactivate the FTP service."
},
{
"lang": "es",
"value": "Una CWE-119: Existe una vulnerabilidad de Errores de Búfer en la CPU M580 - BMEP582040 de Modicon , todas las versiones anteriores a la V2.90, y el módulo Ethernet BMENOC0301 de Modicon, todas las versiones anteriores a la V2.16, lo que podría causar la denegación de servicio en el servicio FTP del controlador o Módulo Ethernet BMENOC cuando recibe un comando CWD de FTP con una longitud de datos superior a 1020 bytes. Se necesita entonces un ciclo de energía para reactivar el servicio FTP."
}
],
"lastModified": "2026-06-17T02:03:50.133",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:bmenoc0301_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB75A465-BACD-417F-9E87-5EBDBEF6DE91",
"versionEndExcluding": "2.16"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:bmenoc0301:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EE6DE336-F696-4C92-9244-315C154F2CE5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:modicon_m580_bmep584040_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97C706A8-BF41-4003-9A34-E7C5FCF3956F",
"versionEndExcluding": "2.90"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:bmeh584040:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E2A8BF9D-AFD1-4F19-A0DB-5EB6F343D890"
},
{
"criteria": "cpe:2.3:h:schneider-electric:bmeh584040c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "63D48211-A734-4F98-A4D5-569268335757"
},
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep584040:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FC4A1DF2-FF4C-4DBE-BF74-6A4A09E3DECE"
},
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep584040s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6222C1F8-BE52-4666-B7F5-2E8BBC214F70"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:modicon_m580_bmep586040_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7793E88-6E59-43E5-B313-A21D40B63B47",
"versionEndExcluding": "2.90"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep586040:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6B3C1879-269B-47EB-891B-EF2E90C911D7"
},
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep586040c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5771A1A5-3DAF-4869-A24F-F9B0A38B5DA5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:bmeh586040_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90CB4BA4-B2B2-441C-A08F-EAB82A0E53DD",
"versionEndExcluding": "2.90"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:bmeh586040:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "38D22DD5-677B-42E8-AE1F-11601D4BF110"
},
{
"criteria": "cpe:2.3:h:schneider-electric:bmeh586040c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "79907FE7-B4B0-4732-9287-B7ED13115F6C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:modicon_m580_bmep581020_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "054142F8-E6AF-48A5-8548-194651EB16FB",
"versionEndExcluding": "2.90"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep581020:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2317F260-7AA2-4178-B468-03DF36223E26"
},
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep581020h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3D7DDC42-37A1-43B0-AD46-2E0D098564BA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:modicon_m580_bmep582020_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F93A877E-BB42-4530-AE81-5C0D727B8A26",
"versionEndExcluding": "2.90"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep582020:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "765E4FEE-255E-4C47-824A-5661B84B490B"
},
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep582020h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B1FEA377-3C45-4F88-B233-088A24BD0771"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:modicon_m580_bmep582040_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B41AE173-2394-4508-A7DD-3166B6C0EBA0",
"versionEndExcluding": "2.90"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep582040:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EBCCDD6D-35CE-4680-8B0C-86584B1D8958"
},
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep582040h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "68FD5968-C522-4231-A98C-93D3101B6148"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:modicon_m580_bmep583020_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDB6829A-AE69-4DDC-B705-A94C8C7ADDA6",
"versionEndExcluding": "2.90"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep583020:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BBC38FF1-693E-4899-883C-1B7B80A52F2C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:modicon_m580_bmep583040_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8762598D-F015-498D-B478-C0CA8ABCB11C",
"versionEndExcluding": "2.90"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep583040:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "002E7F33-6729-4C35-9DDA-7D8383BD5668"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:modicon_m580_bmep584020_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DA851AB-E6AD-4D84-AA3C-071E351C699F",
"versionEndExcluding": "2.90"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep584020:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "47DFEBAC-2F1D-4870-8425-2199BF80B425"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:modicon_m580_bmep585040_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07A33F89-F53A-4DA0-8D21-2F7315A7E5E7",
"versionEndExcluding": "2.90"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep585040:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5376D9F4-8AFB-4909-A11B-33C54C4220DB"
},
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep585040c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CADB178B-FEFD-48A9-B155-0E8F6D490229"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:modicon_m580_bmep582040s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7FCDF8B2-687C-436E-BAF9-654D94409FC7",
"versionEndExcluding": "2.90"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m580_bmep582040s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C02B27F6-B8CF-4D3B-9DA6-054F540EA6B6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:bmeh582040_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4166AE7D-36E9-4F72-868E-DC10DC071E99",
"versionEndExcluding": "2.90"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:bmeh582040:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4E6E5E62-BBA8-4370-A232-8E1196757C3E"
},
{
"criteria": "cpe:2.3:h:schneider-electric:bmeh582040c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9C393EAE-D2A1-42BC-8CE8-2DCAC96EB769"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cybersecurity@se.com"
}