QID 590931

Date Published: 2022-07-29

QID 590931: Schneider Electric Modicon M340 Controller Vulnerability (SEVD-2019-225-02)

AFFECTED PRODUCTS
Modicon M340 controller all firmware versions

QID Detection Logic (Authenticated):
QID checks for the Vulnerable version using passive scanning

Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause denial of service when truncated SNMP packets on port 161/UDP are received by the device.

  • CVSS V3 rated as High - 7.5 severity.
  • CVSS V2 rated as High - 7.8 severity.
  • Solution

    Customers are advised to refer to CERT MITIGATIONS section SEVD-2019-225-02 for affected packages and patching details.

    Vendor References

    CVEs related to QID 590931

    Software Advisories
    Advisory ID Software Component Link