cvelist/2018/7xxx/CVE-2018-7759.json

{
   "CVE_data_meta" : {
      "ASSIGNER" : "cybersecurity@se.com",
      "ID" : "CVE-2018-7759",
      "STATE" : "PUBLIC"
   },
   "affects" : {
      "vendor" : {
         "vendor_data" : [
            {
               "product" : {
                  "product_data" : [
                     {
                        "product_name" : "Modicon M340, Modicon Premium, Modicon Quantum, BMXNOR0200",
                        "version" : {
                           "version_data" : [
                              {
                                 "version_value" : "All Modicon M340, Premium, Quantum PLCs and BMXNOR0200"
                              }
                           ]
                        }
                     }
                  ]
               },
               "vendor_name" : "Schneider Electric SE"
            }
         ]
      }
   },
   "data_format" : "MITRE",
   "data_type" : "CVE",
   "data_version" : "4.0",
   "description" : {
      "description_data" : [
         {
            "lang" : "eng",
            "value" : "A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified (instead of the buffer size) as the number of bytes to be copied."
         }
      ]
   },
   "problemtype" : {
      "problemtype_data" : [
         {
            "description" : [
               {
                  "lang" : "eng",
                  "value" : "Buffer overflow"
               }
            ]
         }
      ]
   },
   "references" : {
      "reference_data" : [
         {
            "name" : "https://www.schneider-electric.com/en/download/document/SEVD-2018-081-02/",
            "refsource" : "CONFIRM",
            "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2018-081-02/"
         }
      ]
   }
}