CVEvulnerability
CVE-2018-7761
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-04-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.
Affected configurations
• schneider-electric bmxnor0200 firmware
• schneider-electric bmxnor0200h firmware
• schneider-electric 140cpu65150 firmware
• schneider-electric 140cpu31110 firmware
• schneider-electric 140cpu43412u firmware
• schneider-electric 140cpu65160 firmware
• schneider-electric 140cpu65260 firmware
• schneider-electric 140cpu65860 firmware
• schneider-electric 140cpu65160s firmware
• schneider-electric 140cpu65150c firmware
• schneider-electric 140cpu31110c firmware
• schneider-electric 140cpu43412uc firmware
• schneider-electric 140cpu65160c firmware
• schneider-electric 140cpu65260c firmware
• schneider-electric 140cpu65860c firmware
• schneider-electric modicon m340 bmxp341000 firmware
• schneider-electric modicon m340 bmxp342000 firmware
• schneider-electric modicon m340 bmxp3420102 firmware
• schneider-electric modicon m340 bmxp3420102cl firmware
• schneider-electric modicon m340 bmxp342020 firmware
• schneider-electric modicon m340 bmxp3420302 firmware
• schneider-electric modicon m340 bmxp3420302cl firmware
• schneider-electric modicon m340 bmxp3420302h firmware
• schneider-electric modicon m340 bmxp342020h firmware
• schneider-electric modicon m340 bmxp341000h firmware
• schneider-electric tsxh5724m firmware
• schneider-electric tsxh5744m firmware
• schneider-electric tsxp57104m firmware
• schneider-electric tsxp57154m firmware
• schneider-electric tsxp571634m firmware
• schneider-electric tsxp57204m firmware
• schneider-electric tsxp57254m firmware
• schneider-electric tsxp572634m firmware
• schneider-electric tsxp57304m firmware
• schneider-electric tsxp57354m firmware
• schneider-electric tsxp573634m firmware
• schneider-electric tsxp57454m firmware
• schneider-electric tsxp574634m firmware
• schneider-electric tsxp575634m firmware
• schneider-electric tsxp576634m firmware
• schneider-electric tsxh5724mc firmware
• schneider-electric tsxh5744mc firmware
• schneider-electric tsxp57104mc firmware
• schneider-electric tsxp57154mc firmware
• schneider-electric tsxp571634mc firmware
• schneider-electric tsxp57204mc firmware
• schneider-electric tsxp57254mc firmware
• schneider-electric tsxp572634mc firmware
• schneider-electric tsxp57304mc firmware
• schneider-electric tsxp57354mc firmware
• schneider-electric tsxp573634mc firmware
• schneider-electric tsxp57454mc firmware
• schneider-electric tsxp574634mc firmware
• schneider-electric tsxp57554mc firmware
• schneider-electric tsxp575634mc firmware
• schneider-electric tsxp576634mc firmware
• schneider-electric tsxp57554m firmware
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness