CRITICAL🇵🇱 Wersja polska

CVE-2020-7533

CVSS 9.8v3.1pub. 2020-12-01upd. 2025-06-10

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Schneider Electric 140cpu65260

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140cpu65260 Firmware

    OS
    Schneider-Electric
    < 6.1

  • Schneider Electric 140noc77101

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140noc77101 Firmware

    OS
    Schneider-Electric
    < 1.08

  • Schneider Electric 140noc78000

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140noc78000 Firmware

    OS
    Schneider-Electric
    < 1.74

  • Schneider Electric 140noe77111

    HW
    Schneider-Electric
    all versions

  • Schneider Electric 140noe77111 Firmware

    OS
    Schneider-Electric
    < 7.1

  • Schneider Electric Bmxnoc0401

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Bmxnoc0401 Firmware

    OS
    Schneider-Electric
    < 2.10

  • Schneider Electric Bmxnoe0100

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Bmxnoe0100 Firmware

    OS
    Schneider-Electric
    < 3.3

  • Schneider Electric Bmxnoe0110

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Bmxnoe0110 Firmware

    OS
    Schneider-Electric
    < 6.5

  • Schneider Electric Modicon M340 Bmxp341000

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp341000 Firmware

    OS
    Schneider-Electric
    < 3.20

  • Schneider Electric Modicon M340 Bmxp342000

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp342000 Firmware

    OS
    Schneider-Electric
    < 3.20

  • Schneider Electric Modicon M340 Bmxp3420102

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp3420102 Firmware

    OS
    Schneider-Electric
    < 3.20

  • Schneider Electric Modicon M340 Bmxp3420302

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Modicon M340 Bmxp3420302 Firmware

    OS
    Schneider-Electric
    < 3.20

  • Schneider Electric Tsxety4103

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Tsxety4103 Firmware

    OS
    Schneider-Electric
    < 6.2

  • Schneider Electric Tsxety5103

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Tsxety5103 Firmware

    OS
    Schneider-Electric
    < 6.4

  • Schneider Electric Tsxp574634

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Tsxp574634 Firmware

    OS
    Schneider-Electric
    < 6.1

  • Schneider Electric Tsxp575634

    HW
    Schneider-Electric
    all versions

  • Schneider Electric Tsxp575634 Firmware

    OS
    Schneider-Electric
    < 6.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2022-37300CRITICAL9.8PL ✓same product

Słaby mechanizm odzyskiwania hasła w produktach Schneider Electric — dostęp przez Modbus

CVE-2021-22779CRITICAL9.1PL ✓same product

Authentication Bypass w produktach Schneider Electric via Modbus Spoofing

CVE-2020-7540CRITICAL9.8PL ✓same product

Brak uwierzytelnienia w serwerze Web na sterownikach Schneider Modicon M340

CVE-2018-7761CRITICAL9.8PL ✓same product

RCE w parserze HTTP żądań sterowników Schneider Electric PLC

CVE-2018-7241CRITICAL9.8PL ✓same product

Zakodowane na stałe konta w sterownikach Schneider Electric Modicon