CVE-2018-7848 PoC — 多款Schneider Electric产品信息泄露漏洞

Source

https://github.com/yanissec/CVE-2018-7848

Associated Vulnerability

Title:多款Schneider Electric产品信息泄露漏洞 (CVE-2018-7848)
Description:A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading files from the controller over Modbus

Description

CVE-2018-7848

Readme

# CVE-2018-7848

### Affected Products

* **Schneider Electric Modicon M580** Version < 2.90

* **Schneider Electric Modicon M340** Version < 3.10

* **Schneider Electric Modicon Premium** All Versions

* **Schneider Electric Modicon Quantum** All Versions

### References

* [https://www.se.com/ww/en/download/document/SEVD-2019-134-11/](https://www.se.com/ww/en/download/document/SEVD-2019-134-11/)

* [https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0740](https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0740)

# Usage

```
python CVE-2018-7848.py --host 192.168.1.123
```

File Snapshot


 [4.0K]  /data/pocs/131f41b8b8dff042674081ec7abb3d976222325a
├── [1.7K]  CVE-2018-7848.py
└── [ 613]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!