CVE & CISA-KEV Catalog

CVE-2018-7794

HIGH

7.5

CVSS v3

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.

How to fix

Remediation Available

140cpu65150 firmwareNVD

Affected:< 3.52Fixed in:3.52CVE-2018-7794derived from NVD

140cpu65160 firmwareNVD

Affected:< 3.52Fixed in:3.52CVE-2018-7794derived from NVD

140cpu65160s firmwareNVD

Affected:< 3.52Fixed in:3.52CVE-2018-7794derived from NVD

140cpu65260 firmwareNVD

Affected:< 3.52Fixed in:3.52CVE-2018-7794derived from NVD

140cpu65860 firmwareNVD

Affected:< 3.52Fixed in:3.52CVE-2018-7794derived from NVD

140cpu67060 firmwareNVD

Affected:< 3.52Fixed in:3.52CVE-2018-7794derived from NVD

140cpu67160 firmwareNVD

Affected:< 3.52Fixed in:3.52CVE-2018-7794derived from NVD

140cpu67160s firmwareNVD

Affected:< 3.52Fixed in:3.52CVE-2018-7794derived from NVD

140cpu67260 firmwareNVD

Affected:< 3.52Fixed in:3.52CVE-2018-7794derived from NVD

140cpu67261 firmwareNVD

Affected:< 3.52Fixed in:3.52CVE-2018-7794derived from NVD

140cpu67861 firmwareNVD

Affected:< 3.52Fixed in:3.52CVE-2018-7794derived from NVD

modicon m340 firmwareNVD

Affected:< 3.01Fixed in:3.01CVE-2018-7794derived from NVD

modicon m580 firmwareNVD

Affected:< 2.80Fixed in:2.80CVE-2018-7794derived from NVD

tsxh5724m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxh5744m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxp57104m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxp57154m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxp571634m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxp57204m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxp57254m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxp572634m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxp57304m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxp57354m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxp573634m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxp57454m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxp574634m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxp57554m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxp575634m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

tsxp576634m firmwareNVD

Affected:< 3.20Fixed in:3.20CVE-2018-7794derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityNone

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploit Intelligence

1.40%probability of exploitation in 30 days

69thpercentile

Moderate risk: more likely to be exploited than 69% of all known CVEs.

References

Vendor Advisory1

se.com

Embed a live status badge for CVE-2018-7794

Markdown

[![CVE-2018-7794](https://tridentstack.com/cve/badge/CVE-2018-7794.svg)](https://tridentstack.com/cve/CVE-2018-7794)

HTML

<a href="https://tridentstack.com/cve/CVE-2018-7794"><img src="https://tridentstack.com/cve/badge/CVE-2018-7794.svg" alt="CVE-2018-7794"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-05-29.