Schneider Electric 140NOE77101 Firmware 4.9

CPE Details

Schneider Electric 140NOE77101 Firmware 4.9
schneider-electric
140noe77101_firmware
4.9
2020-12-14
15h59 +00:00
2021-03-15
17h24 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:schneider-electric:140noe77101_firmware:4.9:*:*:*:*:*:*:*

Informations

Vendor

schneider-electric

Product

140noe77101_firmware

Version

4.9

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-7540 2020-12-10 23h52 +00:00 A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.
9.8
Critical
CVE-2020-7535 2020-12-10 23h51 +00:00 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of information when sending a specially crafted request to the controller over HTTP.
7.5
High
CVE-2020-7477 2020-03-23 18h14 +00:00 A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 (Versions 7.0 and prior), Quantum processors with integrated Ethernet – 140CPU65xxxxx (all Versions), and Premium processors with integrated Ethernet (all Versions), which could cause a Denial of Service when sending a specially crafted command over Modbus.
7.5
High