CRITICAL🇵🇱 Wersja polska

CVE-2018-7761

CVSS 9.8v3.0pub. 2018-04-18upd. 2024-11-21

A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Schneider Electric 140cpu31110

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu31110c

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu31110c Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu31110 Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu43412u

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu43412uc

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu43412uc Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu43412u Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65150

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65150c

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65150c Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65150 Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65160

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65160c

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65160c Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65160 Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65160s

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65160s Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65260

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65260c

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65260c Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65260 Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65860

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65860c

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65860c Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65860 Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric Bmxnor0200

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Bmxnor0200 Firmware

    OS
    Schneider-Electric
    all versions

  • Schneider Electric Bmxnor0200h

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Bmxnor0200h Firmware

    OS
    Schneider-Electric
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2022-37300CRITICAL9.8PL ✓same product

Słaby mechanizm odzyskiwania hasła w produktach Schneider Electric — dostęp przez Modbus

CVE-2021-22779CRITICAL9.1PL ✓same product

Authentication Bypass w produktach Schneider Electric via Modbus Spoofing

CVE-2020-7540CRITICAL9.8PL ✓same product

Brak uwierzytelnienia w serwerze Web na sterownikach Schneider Modicon M340

CVE-2020-7533CRITICAL9.8PL ✓same product

Obejście uwierzytelnienia w serwerze WWW Schneider Electric Modicon M340

CVE-2018-7241CRITICAL9.8PL ✓same product

Zakodowane na stałe konta w sterownikach Schneider Electric Modicon