{"id":"CVE-2018-7759","aliases":["EUVD-2018-19471","GHSA-fx7r-97wv-3rg8"],"status":"published","title":"A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium,...","description":"A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified (instead of the buffer size) as the number of bytes to be copied.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01291,"percentile":0.70434,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2018-04-18T20:00:00Z","modified":"2026-06-17T02:03:40Z","products":[{"vendor":"schneider electric se","product":"modicon m340, modicon premium, modicon quantum, bmxnor0200"},{"vendor":"schneider-electric","product":"140cpu31110_firmware"},{"vendor":"schneider-electric","product":"140cpu31110c_firmware"},{"vendor":"schneider-electric","product":"140cpu43412u_firmware"},{"vendor":"schneider-electric","product":"140cpu43412uc_firmware"},{"vendor":"schneider-electric","product":"140cpu65150_firmware"},{"vendor":"schneider-electric","product":"140cpu65150c_firmware"},{"vendor":"schneider-electric","product":"140cpu65160_firmware"},{"vendor":"schneider-electric","product":"140cpu65160c_firmware"},{"vendor":"schneider-electric","product":"140cpu65160s_firmware"},{"vendor":"schneider-electric","product":"140cpu65260_firmware"},{"vendor":"schneider-electric","product":"140cpu65260c_firmware"},{"vendor":"schneider-electric","product":"140cpu65860_firmware"},{"vendor":"schneider-electric","product":"140cpu65860c_firmware"},{"vendor":"schneider-electric","product":"bmxnor0200_firmware"},{"vendor":"schneider-electric","product":"bmxnor0200h_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp341000_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp341000h_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp342000_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp3420102_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp3420102cl_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp342020_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp342020h_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp3420302_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp3420302cl_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp3420302h_firmware"},{"vendor":"schneider-electric","product":"tsxh5724m_firmware"},{"vendor":"schneider-electric","product":"tsxh5724mc_firmware"},{"vendor":"schneider-electric","product":"tsxh5744m_firmware"},{"vendor":"schneider-electric","product":"tsxh5744mc_firmware"},{"vendor":"schneider-electric","product":"tsxp57104m_firmware"},{"vendor":"schneider-electric","product":"tsxp57104mc_firmware"},{"vendor":"schneider-electric","product":"tsxp57154m_firmware"},{"vendor":"schneider-electric","product":"tsxp57154mc_firmware"},{"vendor":"schneider-electric","product":"tsxp571634m_firmware"},{"vendor":"schneider-electric","product":"tsxp571634mc_firmware"},{"vendor":"schneider-electric","product":"tsxp57204m_firmware"},{"vendor":"schneider-electric","product":"tsxp57204mc_firmware"},{"vendor":"schneider-electric","product":"tsxp57254m_firmware"},{"vendor":"schneider-electric","product":"tsxp57254mc_firmware"},{"vendor":"schneider-electric","product":"tsxp572634m_firmware"},{"vendor":"schneider-electric","product":"tsxp572634mc_firmware"},{"vendor":"schneider-electric","product":"tsxp57304m_firmware"},{"vendor":"schneider-electric","product":"tsxp57304mc_firmware"},{"vendor":"schneider-electric","product":"tsxp57354m_firmware"},{"vendor":"schneider-electric","product":"tsxp57354mc_firmware"},{"vendor":"schneider-electric","product":"tsxp573634m_firmware"},{"vendor":"schneider-electric","product":"tsxp573634mc_firmware"},{"vendor":"schneider-electric","product":"tsxp57454m_firmware"},{"vendor":"schneider-electric","product":"tsxp57454mc_firmware"},{"vendor":"schneider-electric","product":"tsxp574634m_firmware"},{"vendor":"schneider-electric","product":"tsxp574634mc_firmware"},{"vendor":"schneider-electric","product":"tsxp57554m_firmware"},{"vendor":"schneider-electric","product":"tsxp57554mc_firmware"},{"vendor":"schneider-electric","product":"tsxp575634m_firmware"},{"vendor":"schneider-electric","product":"tsxp575634mc_firmware"},{"vendor":"schneider-electric","product":"tsxp576634m_firmware"},{"vendor":"schneider-electric","product":"tsxp576634mc_firmware"}],"references":[{"url":"https://www.schneider-electric.com/en/download/document/SEVD-2018-081-02/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7759"},{"url":"https://github.com/advisories/GHSA-fx7r-97wv-3rg8"}],"sources":{"cve":[{"id":"CVE-2018-7759","description":"A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified (instead of the buffer size) as the number of bytes to be copied.","status":"published","published":"2018-04-18T20:00:00Z","modified":"2024-08-05T06:37:57.979Z","updated_at":"2026-11-02T14:35:09.908186Z"}],"euvd":[{"id":"EUVD-2018-19471","description":"A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified (instead of the buffer size) as the number of bytes to be copied.","status":"published","published":"2018-04-18T20:00:00Z","modified":"2024-08-05T06:37:57Z","updated_at":"2026-11-03T02:40:05.186892Z"}],"ghsa":[{"id":"GHSA-fx7r-97wv-3rg8","title":"A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium,...","description":"A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified (instead of the buffer size) as the number of bytes to be copied.","status":"published","published":"2022-05-14T03:21:17Z","modified":"2023-02-02T05:07:42Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:52:33.872402Z"}],"nvd":[{"id":"CVE-2018-7759","description":"A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified (instead of the buffer size) as the number of bytes to be copied.","status":"published","published":"2018-04-18T20:29:00.683Z","modified":"2026-06-17T02:03:40.147Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:25.506659Z"}]}}