CVE-2018-7760 An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authoriza...
CriticalCVSS 9.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric bmxnor0200 firmware | All versions | No fix listed |
| schneider-electric bmxnor0200h firmware | All versions | No fix listed |
| schneider-electric 140cpu65150 firmware | All versions | No fix listed |
| schneider-electric 140cpu31110 firmware | All versions | No fix listed |
| schneider-electric 140cpu43412u firmware | All versions | No fix listed |
| schneider-electric 140cpu65160 firmware | All versions | No fix listed |
| schneider-electric 140cpu65260 firmware | All versions | No fix listed |
| schneider-electric 140cpu65860 firmware | All versions | No fix listed |
| schneider-electric 140cpu65160s firmware | All versions | No fix listed |
| schneider-electric 140cpu65150c firmware | All versions | No fix listed |
| schneider-electric 140cpu31110c firmware | All versions | No fix listed |
| schneider-electric 140cpu43412uc firmware | All versions | No fix listed |
| schneider-electric 140cpu65160c firmware | All versions | No fix listed |
| schneider-electric 140cpu65260c firmware | All versions | No fix listed |
| schneider-electric 140cpu65860c firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp341000 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp342000 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420102 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420102cl firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp342020 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420302 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420302cl firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420302h firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp342020h firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp341000h firmware | All versions | No fix listed |
Show 33 more
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric tsxh5724m firmware | All versions | No fix listed |
| schneider-electric tsxh5744m firmware | All versions | No fix listed |
| schneider-electric tsxp57104m firmware | All versions | No fix listed |
| schneider-electric tsxp57154m firmware | All versions | No fix listed |
| schneider-electric tsxp571634m firmware | All versions | No fix listed |
| schneider-electric tsxp57204m firmware | All versions | No fix listed |
| schneider-electric tsxp57254m firmware | All versions | No fix listed |
| schneider-electric tsxp572634m firmware | All versions | No fix listed |
| schneider-electric tsxp57304m firmware | All versions | No fix listed |
| schneider-electric tsxp57354m firmware | All versions | No fix listed |
| schneider-electric tsxp573634m firmware | All versions | No fix listed |
| schneider-electric tsxp57454m firmware | All versions | No fix listed |
| schneider-electric tsxp574634m firmware | All versions | No fix listed |
| schneider-electric tsxp575634m firmware | All versions | No fix listed |
| schneider-electric tsxp576634m firmware | All versions | No fix listed |
| schneider-electric tsxh5724mc firmware | All versions | No fix listed |
| schneider-electric tsxh5744mc firmware | All versions | No fix listed |
| schneider-electric tsxp57104mc firmware | All versions | No fix listed |
| schneider-electric tsxp57154mc firmware | All versions | No fix listed |
| schneider-electric tsxp571634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57204mc firmware | All versions | No fix listed |
| schneider-electric tsxp57254mc firmware | All versions | No fix listed |
| schneider-electric tsxp572634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57304mc firmware | All versions | No fix listed |
| schneider-electric tsxp57354mc firmware | All versions | No fix listed |
| schneider-electric tsxp573634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57454mc firmware | All versions | No fix listed |
| schneider-electric tsxp574634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57554mc firmware | All versions | No fix listed |
| schneider-electric tsxp575634mc firmware | All versions | No fix listed |
| schneider-electric tsxp576634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57554m firmware | All versions | No fix listed |
| Schneider Electric SE Modicon M340, Modicon Premium, Modicon Quantum, BMXNOR0201 | = All Modicon M340, Premium, Quantum PLCs and BMXNOR0201 | No fix listed |
References
- www.schneider-electric.com vendor-advisory