CVE-2020-7524

CVE-2020-7524

Vendor N/A
Product Modicon M218 Logic Controller V5.0.0.7 and prior
Weakness CWE-787
Published August 31, 2020
Last update August 4, 2024

CVSS base score

What the vulnerability does

01Description

Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior) which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending a specific IPv4 protocol package to Schneider Electric Modicon M218 Logic Controller can cause IPv4 devices to go down. The device does not work properly and must be powered back on to return to normal.

Key dates

02Disclosure timeline

August 31, 2020 CVE published
August 4, 2024 Record updated