Modicon M580 and BMENOC0301 Buffer Overflow Security Notification

This document is a security notification from Schneider Electric detailing a buffer overflow vulnerability (CVE-2018-7838) in the Modicon M580 controller and BMENOC0301 Ethernet module. The vulnerability can cause a denial of service on the FTP service when receiving a CWD command with data over 1020 bytes, requiring a power cycle to restore service, and fixed firmware versions are provided.