CVE-2014-0754 Schneider Electric
HighCVSS 10.0
EPSS 9.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric stbnic2212 firmware | All versions | No fix listed |
| schneider-electric stbnip2212 firmware | All versions | No fix listed |
| schneider-electric tsxetc0101 firmware | All versions | No fix listed |
| schneider-electric tsxetc100 firmware | All versions | No fix listed |
| schneider-electric tsxp573623mc firmware | All versions | No fix listed |
| schneider-electric tsxety110ws firmware | All versions | No fix listed |
| schneider-electric tsxp574634m firmware | All versions | No fix listed |
| schneider-electric tsxety110wsc firmware | All versions | No fix listed |
| schneider-electric tsxp574823am firmware | All versions | No fix listed |
| schneider-electric tsxety4103 firmware | All versions | No fix listed |
| schneider-electric tsxp574823m firmware | All versions | No fix listed |
| schneider-electric tsxety4103c firmware | All versions | No fix listed |
| schneider-electric tsxp574823mc firmware | All versions | No fix listed |
| schneider-electric tsxety5103 firmware | All versions | No fix listed |
| schneider-electric tsxp575634m firmware | All versions | No fix listed |
| schneider-electric tsxety5103c firmware | All versions | No fix listed |
| schneider-electric tsxp576634m firmware | All versions | No fix listed |
| schneider-electric tsxetz410 firmware | All versions | No fix listed |
| schneider-electric tsxwmy100 firmware | All versions | No fix listed |
| schneider-electric tsxetz510 firmware | All versions | No fix listed |
| schneider-electric tsxwmy100c firmware | All versions | No fix listed |
| schneider-electric tsxntp100 firmware | All versions | No fix listed |
| schneider-electric modicon m580 bmxnoc0402 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxnoe0100 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxnoe0110 firmware | All versions | No fix listed |
Show 84 more
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric modicon m340 bmxnoe0110h firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxnor0200h firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp342020 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp342020h firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp342030 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420302 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420302h firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp342030h firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxnoc0401 firmware | All versions | No fix listed |
| schneider-electric 171ccc96020 firmware | All versions | No fix listed |
| schneider-electric 171ccc96020c firmware | All versions | No fix listed |
| schneider-electric 171ccc96030 firmware | All versions | No fix listed |
| schneider-electric 171ccc96030c firmware | All versions | No fix listed |
| schneider-electric 171ccc98020 firmware | All versions | No fix listed |
| schneider-electric 171ccc98030 firmware | All versions | No fix listed |
| schneider-electric tsxp571634m firmware | All versions | No fix listed |
| schneider-electric tsxp572634m firmware | All versions | No fix listed |
| schneider-electric tsxp573634m firmware | All versions | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 140CPU65150 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 140CPU65160 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 140CPU65260 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 140NOC77100 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 140NOC78000 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 140NOC78100 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 140NOE77100 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 140NOE77101 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 140NOE77101C | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 140NOE77110 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 140NOE77111 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 140NOE77111C | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 140NWM10000 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 170ENT11001 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 170ENT11002 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 170ENT11002C | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 171CCC96020 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 171CCC96020C | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 171CCC96030 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 171CCC96030C | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 171CCC98020 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = 171CCC98030 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = BMXNOC0401 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = BMXNOC0402 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = BMXNOE0100 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = BMXNOE0110 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = BMXNOE0110H | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = BMXNOR0200H | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = BMXP342020 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = BMXP342020H | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = BMXP342030 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = BMXP3420302 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = BMXP3420302H | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = BMXP342030H | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = BMXPRMxxxx | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = STBNIC2212 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = STBNIP2212 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXETC0101 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXETC100 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXETY110WS | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXETY110WSC | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXETY4103 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXETY4103C | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXETY5103 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXETY5103C | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXETZ410 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXETZ510 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXNTP100 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP572623M | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP572623MC | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP572823M | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP572823MC | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP573623AM | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP573623M | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP573623MC | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP574634M | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP574823AM | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP574823M | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP574823MC | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP575634M | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP576634M | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXWMY100 | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXWMY100C | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP571634M | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP572634M | No fix listed |
| Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges | = TSXP573634M | No fix listed |
References
- 70193 third-party-advisory vdb-entry
- download.schneider-electric.com
- www.cisa.gov
- download.schneider-electric.com patch vendor-advisory
- ics-cert.us-cert.gov third-party-advisory us-government-resource