Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200
ATTENTION: Exploitable remotely/low skill level to exploit.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-7242US | critical9.8OT elevated | — | ||
Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. T… | ||||
| CVE-2018-7241US | critical9.8OT elevated | — | ||
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. | ||||
| CVE-2018-7240US | high8.8 | — | ||
A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgra… | ||||
references
External citations — patches, advisories, analysis.
remediations (12)
- MitigationModicon M340
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon M340
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon M340
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon Premium
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon Premium
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon Premium
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon Quantum
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon Quantum
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon Quantum
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon X80 RTU (BMXNOR0200H)
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon X80 RTU (BMXNOR0200H)
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
- MitigationModicon X80 RTU (BMXNOR0200H)
Schneider Electric also recommends that affected users disable FTP services on the device during times when maintenance or configuration activities are not needed.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan