CVEvulnerability

CVE-2018-7240

8.8 HIGH Published 2018-04-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-04-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-787

Description

A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.

Affected configurations

• schneider-electric 140cpu65150 firmware • schneider-electric 140cpu31110 firmware • schneider-electric 140cpu43412u firmware • schneider-electric 140cpu65160 firmware • schneider-electric 140cpu65260 firmware • schneider-electric 140cpu65860 firmware • schneider-electric 140cpu65160s firmware • schneider-electric 140cpu65150c firmware • schneider-electric 140cpu31110c firmware • schneider-electric 140cpu43412uc firmware • schneider-electric 140cpu65160c firmware • schneider-electric 140cpu65260c firmware • schneider-electric 140cpu65860c firmware

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References