Lucene search
This script is Copyright (C) 2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500396.NASLHistoryAug 10, 2021 - 12:00 a.m.
Schneider-electric Modicon Out-of-bounds Write
2021-08-1000:00:00
This script is Copyright (C) 2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
13
0.001 Low
EPSS
Percentile
42.8%
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.
File data ot_500396.nasl| Vendor | Product | Version | CPE |
|---|---|---|---|
| schneider-electric | modicon_quantum_140noe77101_firmware | * | cpe:2.3:o:schneider-electric:modicon_quantum_140noe77101_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | modicon_quantum_140noe77111_firmware | * | cpe:2.3:o:schneider-electric:modicon_quantum_140noe77111_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | modicon_m340_bmx_noc_0401_firmware | * | cpe:2.3:o:schneider-electric:modicon_m340_bmx_noc_0401_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | modicon_m340_bmx_noe_0100_firmware | * | cpe:2.3:o:schneider-electric:modicon_m340_bmx_noe_0100_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | modicon_m340_bmx_noe_0100h_firmware | * | cpe:2.3:o:schneider-electric:modicon_m340_bmx_noe_0100h_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | modicon_m340_bmx_noe_0110_firmware | * | cpe:2.3:o:schneider-electric:modicon_m340_bmx_noe_0110_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | modicon_m340_bmx_noe_0110h_firmware | * | cpe:2.3:o:schneider-electric:modicon_m340_bmx_noe_0110h_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | modicon_m340_bmx_nor_0200h_firmware | * | cpe:2.3:o:schneider-electric:modicon_m340_bmx_nor_0200h_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | modicon_m340_bmx_p34-2010_firmware | * | cpe:2.3:o:schneider-electric:modicon_m340_bmx_p34-2010_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | modicon_m340_bmx_p34-2030_firmware | * | cpe:2.3:o:schneider-electric:modicon_m340_bmx_p34-2030_firmware:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2020-7563
2020-11-18 13:50:57
nvd
nvd
CVE-2020-7563
2020-11-18 14:15:13
cve
cve
CVE-2020-7563
2020-11-18 14:15:13
nessus
nessus
prion
prion
Out-of-bounds
2020-11-18 14:15:00
ics
ics
Schneider Electric Web Server on Modicon M340
2021-01-05 12:00:00