CVE-2018-7844 PoC — 多款Schneider Electric产品信息泄露漏洞

Source

https://github.com/yanissec/CVE-2018-7844

Associated Vulnerability

Title:多款Schneider Electric产品信息泄露漏洞 (CVE-2018-7844)
Description:A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading memory blocks from the controller over Modbus.

Description

CVE-2018-7844

Readme

# CVE-2018-7844

### Affected Products

* **Schneider Electric Modicon M580** All Versions

* **Schneider Electric Modicon M340** All Versions

* **Schneider Electric Modicon Premium** All Versions

* **Schneider Electric Modicon Quantum** All Versions

### References

* [https://www.se.com/ww/en/download/document/SEVD-2019-134-11/](https://www.se.com/ww/en/download/document/SEVD-2019-134-11/)

* [https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0739](https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0739)

# Usage

```
python CVE-2018-7844.py --host 192.168.1.123
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!