CVE-2018-7761 A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.
CriticalCVSS 9.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric bmxnor0200 firmware | All versions | No fix listed |
| schneider-electric bmxnor0200h firmware | All versions | No fix listed |
| schneider-electric 140cpu65150 firmware | All versions | No fix listed |
| schneider-electric 140cpu31110 firmware | All versions | No fix listed |
| schneider-electric 140cpu43412u firmware | All versions | No fix listed |
| schneider-electric 140cpu65160 firmware | All versions | No fix listed |
| schneider-electric 140cpu65260 firmware | All versions | No fix listed |
| schneider-electric 140cpu65860 firmware | All versions | No fix listed |
| schneider-electric 140cpu65160s firmware | All versions | No fix listed |
| schneider-electric 140cpu65150c firmware | All versions | No fix listed |
| schneider-electric 140cpu31110c firmware | All versions | No fix listed |
| schneider-electric 140cpu43412uc firmware | All versions | No fix listed |
| schneider-electric 140cpu65160c firmware | All versions | No fix listed |
| schneider-electric 140cpu65260c firmware | All versions | No fix listed |
| schneider-electric 140cpu65860c firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp341000 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp342000 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420102 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420102cl firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp342020 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420302 firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420302cl firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp3420302h firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp342020h firmware | All versions | No fix listed |
| schneider-electric modicon m340 bmxp341000h firmware | All versions | No fix listed |
Show 33 more
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric tsxh5724m firmware | All versions | No fix listed |
| schneider-electric tsxh5744m firmware | All versions | No fix listed |
| schneider-electric tsxp57104m firmware | All versions | No fix listed |
| schneider-electric tsxp57154m firmware | All versions | No fix listed |
| schneider-electric tsxp571634m firmware | All versions | No fix listed |
| schneider-electric tsxp57204m firmware | All versions | No fix listed |
| schneider-electric tsxp57254m firmware | All versions | No fix listed |
| schneider-electric tsxp572634m firmware | All versions | No fix listed |
| schneider-electric tsxp57304m firmware | All versions | No fix listed |
| schneider-electric tsxp57354m firmware | All versions | No fix listed |
| schneider-electric tsxp573634m firmware | All versions | No fix listed |
| schneider-electric tsxp57454m firmware | All versions | No fix listed |
| schneider-electric tsxp574634m firmware | All versions | No fix listed |
| schneider-electric tsxp575634m firmware | All versions | No fix listed |
| schneider-electric tsxp576634m firmware | All versions | No fix listed |
| schneider-electric tsxh5724mc firmware | All versions | No fix listed |
| schneider-electric tsxh5744mc firmware | All versions | No fix listed |
| schneider-electric tsxp57104mc firmware | All versions | No fix listed |
| schneider-electric tsxp57154mc firmware | All versions | No fix listed |
| schneider-electric tsxp571634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57204mc firmware | All versions | No fix listed |
| schneider-electric tsxp57254mc firmware | All versions | No fix listed |
| schneider-electric tsxp572634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57304mc firmware | All versions | No fix listed |
| schneider-electric tsxp57354mc firmware | All versions | No fix listed |
| schneider-electric tsxp573634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57454mc firmware | All versions | No fix listed |
| schneider-electric tsxp574634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57554mc firmware | All versions | No fix listed |
| schneider-electric tsxp575634mc firmware | All versions | No fix listed |
| schneider-electric tsxp576634mc firmware | All versions | No fix listed |
| schneider-electric tsxp57554m firmware | All versions | No fix listed |
| Schneider Electric SE Modicon M340, Modicon Premium, Modicon Quantum, BMXNOR0202 | = All Modicon M340, Premium, Quantum PLCs and BMXNOR0202 | No fix listed |
References
- www.schneider-electric.com vendor-advisory