{"id":"CVE-2020-7542","aliases":["EUVD-2020-28667","GHSA-c36c-5h7j-842j"],"status":"published","title":"A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...","description":"A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum \u0026 Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01338,"percentile":0.71644,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-754"],"published":"2020-12-11T00:52:14Z","modified":"2026-06-17T03:24:58Z","products":[{"vendor":"schneider-electric","product":"140cpu65150_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp341000_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp342000_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp3420102_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp3420102cl_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp342020_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp3420302_firmware"},{"vendor":"schneider-electric","product":"modicon_m340_bmxp3420302cl_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep581020_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep582020_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep582040_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep583020_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep583040_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep584020_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep584040_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep585040_firmware"},{"vendor":"schneider-electric","product":"modicon_m580_bmep586040_firmware"},{"vendor":"schneider-electric","product":"tsxp574634_firmware"},{"vendor":"schneider-electric","product":"tsxp575634_firmware"},{"vendor":"schneider-electric","product":"tsxp576634_firmware"}],"references":[{"url":"https://www.se.com/ww/en/download/document/SEVD-2020-343-08/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7542"},{"url":"https://github.com/advisories/GHSA-c36c-5h7j-842j"}],"sources":{"cve":[{"id":"CVE-2020-7542","description":"A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum \u0026 Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.","status":"published","published":"2020-12-11T00:52:14Z","modified":"2024-08-04T09:33:19.616Z","cwes":["CWE-754"],"updated_at":"2026-11-02T14:35:58.331892Z"}],"euvd":[{"id":"EUVD-2020-28667","description":"A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum \u0026 Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.","status":"published","published":"2020-12-11T00:52:14Z","modified":"2024-08-04T09:33:19Z","updated_at":"2026-11-03T03:07:59.603443Z"}],"ghsa":[{"id":"GHSA-c36c-5h7j-842j","title":"A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...","description":"A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum \u0026 Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.","status":"published","published":"2022-05-24T17:36:08Z","modified":"2023-01-29T05:04:43Z","cwes":["CWE-754"],"updated_at":"2026-11-02T14:45:37.465361Z"}],"nvd":[{"id":"CVE-2020-7542","description":"A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum \u0026 Modicon Premium (see security notifications for affected versions), that could cause denial of service when a specially crafted Read Physical Memory request over Modbus is sent to the controller.","status":"published","published":"2020-12-11T01:15:12.517Z","modified":"2026-06-17T03:24:58.54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-754"],"updated_at":"2026-11-02T14:06:27.10541Z"}]}}