Schneider Electric 140NOC78100 Firmware 1.63

CPE Details

Schneider Electric 140NOC78100 Firmware 1.63
schneider-electric
140noc78100_firmware
1.63
2020-12-14
15h45 +00:00
2021-03-15
17h24 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:schneider-electric:140noc78100_firmware:1.63:*:*:*:*:*:*:*

Informations

Vendor

schneider-electric

Product

140noc78100_firmware

Version

1.63

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-7549 2020-12-10 23h52 +00:00 A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause denial of HTTP and FTP services when a series of specially crafted requests is sent to the controller over HTTP.
5.3
Medium
CVE-2020-7541 2020-12-10 23h52 +00:00 A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of sensitive data when sending a specially crafted request to the controller over HTTP.
5.3
Medium
CVE-2020-7540 2020-12-10 23h52 +00:00 A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.
9.8
Critical
CVE-2020-7539 2020-12-10 23h51 +00:00 A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause a denial of service vulnerability when a specially crafted packet is sent to the controller over HTTP.
7.5
High
CVE-2020-7535 2020-12-10 23h51 +00:00 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of information when sending a specially crafted request to the controller over HTTP.
7.5
High