CVEvulnerability

CVE-2020-7533

9.8 CRITICAL Published 2020-12-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-12-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests.

Affected configurations

• schneider-electric modicon m340 bmxp3420302 firmware (< 3.20) • schneider-electric modicon m340 bmxp342000 firmware (< 3.20) • schneider-electric modicon m340 bmxp341000 firmware (< 3.20) • schneider-electric modicon m340 bmxp3420102 firmware (< 3.20) • schneider-electric bmxnoe0100 firmware (< 3.3) • schneider-electric bmxnoe0110 firmware (< 6.5) • schneider-electric bmxnoc0401 firmware (< 2.10) • schneider-electric tsxp574634 firmware (< 6.1) • schneider-electric tsxp575634 firmware (< 6.1) • schneider-electric tsxp576634 firmware (< 6.1) • schneider-electric tsxety4103 firmware (< 6.2) • schneider-electric tsxety5103 firmware (< 6.4) • schneider-electric 140noe77111 firmware (< 7.1) • schneider-electric 140noc78000 firmware (< 1.74) • schneider-electric 140noc77101 firmware (< 1.08) • schneider-electric 140cpu65260 firmware (< 6.1)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References