[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuZLYY3sZ99l-IFIR7jYjBbbhVi6FsuNOjBWm52cSm1I":3,"g5a-risk:CVE-2018-7842":175},{"success":4,"data":5,"meta":173},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":70,"references":71,"referencesCount":83,"weaknesses":84,"weaknessesCount":93,"isActivelyExploited":94,"cisaInfo":27,"otxData":27,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":164,"notableEvents":165},"CVE-2018-7842","What is CVE-2018-7842?","A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause an elevation of privilege by conducting a brute force attack on Modbus parameters sent to the controller.","A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium whi...","2019-05-22T20:29:01.557","2022-02-03T14:06:09.787",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.35039,[39,39,39,39,39,39,39],"Critical",[43,48,52,55,58,61,64,67],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"schneider-electric","modicon_m580_firmware","*","cpe:2.3:o:schneider-electric:modicon_m580_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"modicon_m580","-","cpe:2.3:h:schneider-electric:modicon_m580:-:*:*:*:*:*:*:*",{"vendor":44,"product":53,"version":46,"criteria":54,"vulnerable":4},"modicon_m340_firmware","cpe:2.3:o:schneider-electric:modicon_m340_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":56,"version":50,"criteria":57,"vulnerable":4},"modicon_m340","cpe:2.3:h:schneider-electric:modicon_m340:-:*:*:*:*:*:*:*",{"vendor":44,"product":59,"version":46,"criteria":60,"vulnerable":4},"modicon_quantum_firmware","cpe:2.3:o:schneider-electric:modicon_quantum_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":62,"version":50,"criteria":63,"vulnerable":4},"modicon_quantum","cpe:2.3:h:schneider-electric:modicon_quantum:-:*:*:*:*:*:*:*",{"vendor":44,"product":65,"version":46,"criteria":66,"vulnerable":4},"modicon_premium_firmware","cpe:2.3:o:schneider-electric:modicon_premium_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":68,"version":50,"criteria":69,"vulnerable":4},"modicon_premium","cpe:2.3:h:schneider-electric:modicon_premium:-:*:*:*:*:*:*:*",8,[72,77],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fwww.schneider-electric.com\u002Fen\u002Fdownload\u002Fdocument\u002FSEVD-2019-134-11\u002F","Schneider-electric",[76],"Vendor Advisory",{"url":78,"source":79,"tags":80},"https:\u002F\u002Fwww.talosintelligence.com\u002Fvulnerability_reports\u002FTALOS-2018-0741","Talosintelligence",[81,82],"Exploit","Third Party Advisory",2,[85],{"id":86,"name":87,"description":88,"extendedDescription":89,"status":90,"abstraction":91,"structure":92},"CWE-290","Authentication Bypass by Spoofing","This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.","","Incomplete","Base","Simple",1,false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2018-7842? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-7842, a critical severity cyber security vulnerability from 2019. High exploit probability (35.0%). A CWE-290: Authenticat...","CVE-2018-7842, CVE-2018-7842 vulnerability, CVE-2018-7842 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, schneider-electric security, modicon_m580_firmware vulnerability, modicon_m580 vulnerability, modicon_m340_firmware vulnerability, modicon_m340 vulnerability, modicon_quantum_firmware vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2018-7842",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-7842","Cybersecurity","CVE-2018-7842, CVE-2018-7842 vulnerability, CVE-2018-7842 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122,134,144,154],{"Operator":123,"Negate":27,"Nodes":124},"AND",[125,130],{"Operator":126,"Negate":27,"CPEMatch":127},"OR",[128],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":129,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D52D735D-8AB5-40FE-A83F-266977601571",{"Operator":126,"Negate":27,"CPEMatch":131},[132],{"Vulnerable":27,"Criteria":51,"MatchCriteriaID":133,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E876C738-ABF6-4864-98A6-1E06E96A0DF4",{"Operator":123,"Negate":27,"Nodes":135},[136,140],{"Operator":126,"Negate":27,"CPEMatch":137},[138],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"05CBA9AD-ECB7-453F-8551-DD176FDE8043",{"Operator":126,"Negate":27,"CPEMatch":141},[142],{"Vulnerable":27,"Criteria":57,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"138681A2-0146-492B-8E10-06849FC27C6E",{"Operator":123,"Negate":27,"Nodes":145},[146,150],{"Operator":126,"Negate":27,"CPEMatch":147},[148],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":149,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"745CC7A7-70FB-4551-8EBF-600B7A6236D7",{"Operator":126,"Negate":27,"CPEMatch":151},[152],{"Vulnerable":27,"Criteria":63,"MatchCriteriaID":153,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A9B7CEF7-B9BA-4923-808F-DA2931569EBB",{"Operator":123,"Negate":27,"Nodes":155},[156,160],{"Operator":126,"Negate":27,"CPEMatch":157},[158],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":159,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"619CFD8D-9652-4AAB-AFC4-796B3F10F61F",{"Operator":126,"Negate":27,"CPEMatch":161},[162],{"Vulnerable":27,"Criteria":69,"MatchCriteriaID":163,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F00936E2-E6EF-4ABF-8666-7D83BE424F42",[],[166],{"id":167,"eventType":168,"eventTime":169,"details":170,"label":171,"color":172},"9fe719d1-b358-4246-b760-9ca219191a13","HIGH_EPSS_DELTA","2026-06-16T04:06:09.978273+00:00","Daily EPSS score increased by 0.249 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":174,"version":33},1792385659856,{"score":176,"band":177,"action":178,"scoredAt":179},61,"Medium","Plan remediation","2026-10-16T06:46:11.933661+00:00"]