CVE-2018-7843 PoC — 多款Schneider Electric产品缓冲区错误漏洞

Source

https://github.com/yanissec/CVE-2018-7843

Associated Vulnerability

Title:多款Schneider Electric产品缓冲区错误漏洞 (CVE-2018-7843)
Description:A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading memory blocks with an invalid data size or with an invalid data offset in the controller over Modbus.

Description

CVE-2018-7843

Readme

# CVE-2018-7843

### Affected Products

* **Schneider Electric Modicon M580** Version < 2.80

* **Schneider Electric Modicon M340** Version < 3.10

* **Schneider Electric Modicon Premium** Version < 3.20

* **Schneider Electric Modicon Quantum** Version < 3.60

### References

* [https://www.se.com/ww/en/download/document/SEVD-2019-134-11/](https://www.se.com/ww/en/download/document/SEVD-2019-134-11/)

* [https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0738](https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0738)

# Usage

```
python CVE-2018-7843.py --host 192.168.1.123
```

File Snapshot


 [4.0K]  /data/pocs/bf59bbc818fc90bdbfedca62419102a9858c5e36
├── [1.3K]  CVE-2018-7843.py
└── [ 617]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!