CVE-2018-7241 Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.
CriticalCVSS 9.8
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric bmxnor0200 firmware | All versions | No fix listed |
| schneider-electric bmxnor0200h firmware | All versions | No fix listed |
| schneider-electric 140cpu65150 firmware | All versions | No fix listed |
| schneider-electric 140cpu31110 firmware | All versions | No fix listed |
| schneider-electric 140cpu43412u firmware | All versions | No fix listed |
| schneider-electric 140cpu65160 firmware | All versions | No fix listed |
| schneider-electric 140cpu65260 firmware | All versions | No fix listed |
| schneider-electric 140cpu65860 firmware | All versions | No fix listed |
| schneider-electric 140cpu65160s firmware | All versions | No fix listed |
| schneider-electric 140cpu65150c firmware | All versions | No fix listed |
| schneider-electric 140cpu31110c firmware | All versions | No fix listed |
| schneider-electric 140cpu43412uc firmware | All versions | No fix listed |
| schneider-electric 140cpu65160c firmware | All versions | No fix listed |
| schneider-electric 140cpu65260c firmware | All versions | No fix listed |
| schneider-electric 140cpu65860c firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp341000 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp342000 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420102 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420102cl firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp342020 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420302 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420302cl firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420302h firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp342020h firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp341000h firmware | All versions | No fix listed |
Show 33 more
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric tsxh5724m firmware | All versions | No fix listed |
| schneider-electric tsxh5744m firmware | All versions | No fix listed |
| schneider-electric tsxp57104m firmware | All versions | No fix listed |
| schneider-electric tsxp57154m firmware | All versions | No fix listed |
| schneider-electric tsxp571634m firmware | All versions | No fix listed |
| schneider-electric tsxp57204m firmware | All versions | No fix listed |
| schneider-electric tsxp57254m firmware | All versions | No fix listed |
| schneider-electric tsxp572634m firmware | All versions | No fix listed |
| schneider-electric tsxp57304m firmware | All versions | No fix listed |
| schneider-electric tsxp57354m firmware | All versions | No fix listed |
| schneider-electric tsxp573634m firmware | All versions | No fix listed |
| schneider-electric tsxp57454m firmware | All versions | No fix listed |
| schneider-electric tsxp574634m firmware | All versions | No fix listed |
| schneider-electric tsxp575634m firmware | All versions | No fix listed |
| schneider-electric tsxp576634m firmware | All versions | No fix listed |
| schneider-electric tsxh5724mc firmware | All versions | No fix listed |
| schneider-electric tsxh5744mc firmware | All versions | No fix listed |
| schneider-electric tsxp57104mc firmware | All versions | No fix listed |
| schneider-electric tsxp57154mc firmware | All versions | No fix listed |
| schneider-electric tsxp571634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57204mc firmware | All versions | No fix listed |
| schneider-electric tsxp57254mc firmware | All versions | No fix listed |
| schneider-electric tsxp572634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57304mc firmware | All versions | No fix listed |
| schneider-electric tsxp57354mc firmware | All versions | No fix listed |
| schneider-electric tsxp573634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57454mc firmware | All versions | No fix listed |
| schneider-electric tsxp574634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57554mc firmware | All versions | No fix listed |
| schneider-electric tsxp575634mc firmware | All versions | No fix listed |
| schneider-electric tsxp576634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57554m firmware | All versions | No fix listed |
| Schneider Electric SE Modicon Premium, Modicon Quantum, Modicon M340, BMXNOR0200 | = All versions of communication modules for Modicon Premium, Quantum, M340 and BMXNOR0200 | No fix listed |
References
- 103542 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- www.schneider-electric.com vendor-advisory