Skip to main content

Bmxnor0200 Firmware CVE-2018-7241

CRITICAL
Use of Hard-coded Credentials (CWE-798)
2018-04-18 cybersecurity@se.com
Schneider Electric Authentication Bypass Bmxnor0200 Firmware Bmxnor0200H Firmware 140Cpu65150 Firmware 140Cpu31110 Firmware 140Cpu43412U Firmware 140Cpu65160 Firmware 140Cpu65260 Firmware 140Cpu65860 Firmware 140Cpu65160S Firmware 140Cpu65150C Firmware 140Cpu31110C Firmware 140Cpu43412Uc Firmware 140Cpu65160C Firmware 140Cpu65260C Firmware 140Cpu65860C Firmware Modicon M340 Bmxp341000 Firmware Modicon M340 Bmxp342000 Firmware Modicon M340 Bmxp3420102 Firmware Modicon M340 Bmxp3420102Cl Firmware Modicon M340 Bmxp342020 Firmware Modicon M340 Bmxp3420302 Firmware Modicon M340 Bmxp3420302Cl Firmware Modicon M340 Bmxp3420302H Firmware Modicon M340 Bmxp342020H Firmware Modicon M340 Bmxp341000H Firmware Tsxh5724M Firmware Tsxh5744M Firmware Tsxp57104M Firmware Tsxp57154M Firmware Tsxp571634M Firmware Tsxp57204M Firmware Tsxp57254M Firmware Tsxp572634M Firmware Tsxp57304M Firmware Tsxp57354M Firmware Tsxp573634M Firmware Tsxp57454M Firmware Tsxp574634M Firmware Tsxp575634M Firmware Tsxp576634M Firmware Tsxh5724Mc Firmware Tsxh5744Mc Firmware Tsxp57104Mc Firmware Tsxp57154Mc Firmware Tsxp571634Mc Firmware Tsxp57204Mc Firmware Tsxp57254Mc Firmware Tsxp572634Mc Firmware Tsxp57304Mc Firmware Tsxp57354Mc Firmware Tsxp573634Mc Firmware Tsxp57454Mc Firmware Tsxp574634Mc Firmware Tsxp57554Mc Firmware Tsxp575634Mc Firmware Tsxp576634Mc Firmware Tsxp57554M Firmware
9.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Apr 18, 2018 - 20:29 nvd
CRITICAL 9.8

DescriptionNVD

Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.

AnalysisAI

Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Use of Hard-coded Credentials (CWE-798), which allows attackers to gain access using credentials embedded in source code. Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. Affected products include: Schneider-Electric Bmxnor0200 Firmware, Schneider-Electric Bmxnor0200H Firmware, Schneider-Electric 140Cpu65150 Firmware, Schneider-Electric 140Cpu31110 Firmware, Schneider-Electric 140Cpu43412U Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Remove hard-coded credentials, use environment variables or secrets management, rotate exposed credentials immediately.

More in Bmxnor0200 Firmware

View all
CVE-2018-7761 CRITICAL
9.8 Apr 18

A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum
CVE-2018-7760 CRITICAL
9.8 Apr 18

An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC,
CVE-2018-7242 CRITICAL
9.8 Apr 18

Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200
CVE-2018-7762 HIGH
7.5 Apr 18

A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premiu
CVE-2018-7759 HIGH
7.5 Apr 18

A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNO

Same weakness CWE-798 – Use of Hard-coded Credentials

View all
CVE-2016-1560 CRITICAL POC
9.8
CVE-2017-14143 CRITICAL POC
9.8
CVE-2026-22769 CRITICAL
10.0
CVE-2016-5678 CRITICAL POC
9.8
CVE-2017-6558 CRITICAL POC
9.8
CVE-2015-7246 CRITICAL POC
9.8
CVE-2015-4667 CRITICAL POC
9.8
CVE-2016-10177 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2018-7241 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy