CVE-2020-7477

HIGH

Schneider Electric Quantum Ethernet Modules - Denial of Service via Modbus Command

Title source: llm
STIX 2.1

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 (Versions 7.0 and prior), Quantum processors with integrated Ethernet – 140CPU65xxxxx (all Versions), and Premium processors with integrated Ethernet (all Versions), which could cause a Denial of Service when sending a specially crafted command over Modbus.

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0054
EPSS Percentile 67.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-754
Status published
Products (28)
schneider-electric/140cpu65150_firmware
schneider-electric/140cpu65160_firmware
schneider-electric/140cpu65160s_firmware
schneider-electric/140cpu65260_firmware
schneider-electric/140cpu65860_firmware
schneider-electric/140cpu67060_firmware
schneider-electric/140cpu67160_firmware
schneider-electric/140cpu67160s_firmware
schneider-electric/140cpu67260_firmware
schneider-electric/140cpu67261_firmware
... and 18 more
Published Mar 23, 2020
Tracked Since Feb 18, 2026