CVE-2018-7809

N/A

Descricao

An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the password delete function of the web server.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado11/30/2018

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

schneider-electric:modicom_bmxnor0200hschneider-electric:modicom_bmxnor0200h_firmwareschneider-electric:modicom_m340schneider-electric:modicom_m340_firmwareschneider-electric:modicom_premiumschneider-electric:modicom_premium_firmwareschneider-electric:modicom_quantumschneider-electric:modicom_quantum_firmware

Fraquezas (CWE)

CWE-640

Referencias

https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/(cybersecurity@se.com)

https://www.tenable.com/security/research/tra-2018-38(cybersecurity@se.com)

https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/(af854a3a-2127-422b-91ae-364da2661108)

https://www.tenable.com/security/research/tra-2018-38(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.