Schneider Electric SE Vulnerabilities and Affected Products
Vulnerabilities associated with Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200.
Products
Clear product- U.Motion20 vulnerabilities
- Pelco Sarix Professional12 vulnerabilities
- Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR02008 vulnerabilities
- 66074 MGE Network Management Card Transverse installed in MGE UPS and MGE STS4 vulnerabilities
- Citect Anywhere4 vulnerabilities
- IIoT Monitor 3.1.384 vulnerabilities
- Modicon M221, all references, all versions prior to firmware V1.6.2.04 vulnerabilities
- Modicon M5804 vulnerabilities
- PowerSCADA Anywhere4 vulnerabilities
- U.motion Builder4 vulnerabilities
- Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0)3 vulnerabilities
- EVLink Parking v3.2.0-12_v1 and earlier3 vulnerabilities
- Modicon M3403 vulnerabilities
- Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions)3 vulnerabilities
- Modicon Quantum3 vulnerabilities
- Pelco Sarix Professional V13 vulnerabilities
- Pelco VideoXpert Enterprise3 vulnerabilities
- Ampla MES2 vulnerabilities
- BMXNOR0200H Ethernet / Serial RTU module2 vulnerabilities
- ClearSCADA2 vulnerabilities
- Modicon Premium2 vulnerabilities
- Modicon Premium, Modicon Quantum, Modicon M340, BMXNOR02002 vulnerabilities
- SoMachine HVAC Programming Software2 vulnerabilities
- U.motion Server2 vulnerabilities
- Wiser for KNX2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2018-7812HIGH | An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where the web server sends different responses in a way that exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not. CWE-200Dec 17, 2018 | CVSS7.5v3.0 | EPSS3.71% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2018-7804MEDIUM | A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially crafted link can be redirected to a URL of the attacker's choosing. CWE-601Dec 17, 2018 | CVSS6.1v3.0 | EPSS0.864% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2018-7833HIGH | An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable CWE-754Dec 17, 2018 | CVSS7.5v3.0 | EPSS1.38% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2018-7809CRITICAL | An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the password delete function of the web server. CWE-640Nov 30, 2018 | CVSS9.8v3.0 | EPSS2.47% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2018-7810MEDIUM | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to craft a URL containing JavaScript that will be executed within the user's browser, potentially impacting the machine the browser is running on. CWE-79Nov 30, 2018 | CVSS6.1v3.0 | EPSS0.896% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2018-7811CRITICAL | An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the change password function of the web server CWE-640Nov 30, 2018 | CVSS9.8v3.0 | EPSS3.5% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2018-7831HIGH | An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to send a specially crafted URL to a currently authenticated web server user to execute a password change on the web server. | CVSS8.8v3.0 | EPSS0.635% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2018-7830HIGH | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a denial of service can occur for ~1 minute by sending a specially crafted HTTP request. CWE-113Nov 30, 2018 | CVSS7.5v3.0 | EPSS2.42% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |