CVE:CVE-2018-7838
CNNVD:CNNVD-201905-727
Schneider Electric Modicon M580 CPU和Ethernet Module BMENOC0301都是法国施耐德电气（Schneider Electric）公司的产品。Schneider Electric Modicon M580 CPU是一款M580以太网可编程自动化控制器的处理器模块。Ethernet Module BMENOC0301是一款以太网通信模块。
Schneider Electric Modicon M580 CPU - BMEP582040 2.90之前版本和Ethernet Module BMENOC0301 2.16之前版本中存在缓冲区错误漏洞。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade schneider-electric bmenoc0301_firmware to a higher version than 2.16,and avoid the version (,2.16); Upgrade schneider-electric modicon_m580_bmep584040_firmware to a higher version than 2.90,and avoid the version (,2.90); Upgrade schneider-electric modicon_m580_bmep586040_firmware to a higher version than 2.90,and avoid the version (,2.90); Upgrade schneider-electric bmeh586040_firmware to a higher version than 2.90,and avoid the version (,2.90); Upgrade schneider-electric modicon_m580_bmep581020_firmware to a higher version than 2.90,and avoid the version (,2.90); Upgrade schneider-electric modicon_m580_bmep582020_firmware to a higher version than 2.90,and avoid the version (,2.90); Upgrade schneider-electric modicon_m580_bmep582040_firmware to a higher version than 2.90,and avoid the version (,2.90); Upgrade schneider-electric modicon_m580_bmep583020_firmware to a higher version than 2.90,and avoid the version (,2.90); Upgrade schneider-electric modicon_m580_bmep583040_firmware to a higher version than 2.90,and avoid the version (,2.90); Upgrade schneider-electric modicon_m580_bmep584020_firmware to a higher version than 2.90,and avoid the version (,2.90); Upgrade schneider-electric modicon_m580_bmep585040_firmware to a higher version than 2.90,and avoid the version (,2.90); Upgrade schneider-electric modicon_m580_bmep582040s_firmware to a higher version than 2.90,and avoid the version (,2.90); Upgrade schneider-electric bmeh582040_firmware to a higher version than 2.90,and avoid the version (,2.90)