U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2018-7851

Change History

Initial Analysis by NIST 5/23/2019 1:55:17 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:schneider-electric:140cra312xxx_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:schneider-electric:140cra312xxx:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:schneider-electric:bmx\/e_cra_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.40
     OR
          cpe:2.3:h:schneider-electric:bmxcra31200:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmxcra31210c:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:schneider-electric:m340_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.01
     OR
          cpe:2.3:h:schneider-electric:bmxp341000:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmxp341000h:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmxp342000:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmxp3420102:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmxp3420102cl:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmxp342020:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmxp342020h:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmxp3420302:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmxp3420302cl:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmxp3420302h:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:schneider-electric:m580_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.50
     OR
          cpe:2.3:h:schneider-electric:bmeh582040:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmeh582040c:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmeh584040:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmeh584040c:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmeh586040:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmeh586040c:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep581020:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep581020h:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep582020:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep582020h:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep582040:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep582040h:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep582040s:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep583020:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep583040:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep584020:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep584040:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep584040s:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep585040:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep585040c:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep586040:-:*:*:*:*:*:*:*
          cpe:2.3:h:schneider-electric:bmep586040c:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:schneider-electric:modicon_premium_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:schneider-electric:modicon_premium:-:*:*:*:*:*:*:*
Added CVSS V2

								
							
							
						
(AV:N/AC:L/Au:S/C:N/I:N/A:C)
Added CVSS V3

								
							
							
						
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Added CWE

								
							
							
						
CWE-119
Changed Reference Type
https://www.schneider-electric.com/en/download/document/SEVD-2019-134-10/ No Types Assigned
https://www.schneider-electric.com/en/download/document/SEVD-2019-134-10/ Vendor Advisory