CVE-2011-4860
Schneider-electric Quantum Ethernet M... - Authentication Bypass
Title source: ruleDescription
The ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) generates the password for the fwupgrade account by performing a calculation on the MAC address, which makes it easier for remote attackers to obtain access via a (1) ARP request message or (2) Neighbor Solicitation message.
Scores
EPSS
0.0163
EPSS Percentile
81.7%
Classification
CWE
CWE-287
Status
draft
Affected Products (3)
schneider-electric/quantum_ethernet_module_140noe77100
< 3.3
schneider-electric/quantum_ethernet_module_140noe77101
< 4.9
schneider-electric/quantum_ethernet_module_140noe77111
< 5.0
Timeline
Published
Dec 17, 2011
Tracked Since
Feb 18, 2026