{"id":"CVE-2018-7759","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-7759","generatedAt":"2026-10-28T22:42:03.665Z","title":"A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200.","description":"A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified (instead of the buffer size) as the number of bytes to be copied.","published":"2018-04-18T20:29:01.000Z","lastModified":"2026-06-17T02:03:40.000Z","status":"Modified","sourceIdentifier":"cybersecurity@se.com","cvss":{"version":"3.0","score":7.5,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-119"],"affected":["schneider-electric/bmxnor0200 firmware","schneider-electric/bmxnor0200h firmware","schneider-electric/140cpu65150 firmware","schneider-electric/140cpu31110 firmware","schneider-electric/140cpu43412u firmware","schneider-electric/140cpu65160 firmware","schneider-electric/140cpu65260 firmware","schneider-electric/140cpu65860 firmware","schneider-electric/140cpu65160s firmware","schneider-electric/140cpu65150c firmware","schneider-electric/140cpu31110c firmware","schneider-electric/140cpu43412uc firmware","schneider-electric/140cpu65160c firmware","schneider-electric/140cpu65260c firmware","schneider-electric/140cpu65860c firmware","schneider-electric/modicon m340 bmxp341000 firmware","schneider-electric/modicon m340 bmxp342000 firmware","schneider-electric/modicon m340 bmxp3420102 firmware","schneider-electric/modicon m340 bmxp3420102cl firmware","schneider-electric/modicon m340 bmxp342020 firmware","schneider-electric/modicon m340 bmxp3420302 firmware","schneider-electric/modicon m340 bmxp3420302cl firmware","schneider-electric/modicon m340 bmxp3420302h firmware","schneider-electric/modicon m340 bmxp342020h firmware","schneider-electric/modicon m340 bmxp341000h firmware","schneider-electric/tsxh5724m firmware","schneider-electric/tsxh5744m firmware","schneider-electric/tsxp57104m firmware","schneider-electric/tsxp57154m firmware","schneider-electric/tsxp571634m firmware","schneider-electric/tsxp57204m firmware","schneider-electric/tsxp57254m firmware","schneider-electric/tsxp572634m firmware","schneider-electric/tsxp57304m firmware","schneider-electric/tsxp57354m firmware","schneider-electric/tsxp573634m firmware","schneider-electric/tsxp57454m firmware","schneider-electric/tsxp574634m firmware","schneider-electric/tsxp575634m firmware","schneider-electric/tsxp576634m firmware","schneider-electric/tsxh5724mc firmware","schneider-electric/tsxh5744mc firmware","schneider-electric/tsxp57104mc firmware","schneider-electric/tsxp57154mc firmware","schneider-electric/tsxp571634mc firmware","schneider-electric/tsxp57204mc firmware","schneider-electric/tsxp57254mc firmware","schneider-electric/tsxp572634mc firmware","schneider-electric/tsxp57304mc firmware","schneider-electric/tsxp57354mc firmware","schneider-electric/tsxp573634mc firmware","schneider-electric/tsxp57454mc firmware","schneider-electric/tsxp574634mc firmware","schneider-electric/tsxp57554mc firmware","schneider-electric/tsxp575634mc firmware","schneider-electric/tsxp576634mc firmware","schneider-electric/tsxp57554m firmware"],"epss":{"score":0.01291,"percentile":0.70089,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.29%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.schneider-electric.com/en/download/document/SEVD-2018-081-02/","tags":["Vendor Advisory"],"source":"cybersecurity@se.com"},{"url":"https://www.schneider-electric.com/en/download/document/SEVD-2018-081-02/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-7759","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}