Skip to main content

Bmxnor0200 Firmware CVE-2018-7761

CRITICAL
Improper Input Validation (CWE-20)
2018-04-18 cybersecurity@se.com
Schneider Electric RCE Bmxnor0200 Firmware Bmxnor0200H Firmware 140Cpu65150 Firmware 140Cpu31110 Firmware 140Cpu43412U Firmware 140Cpu65160 Firmware 140Cpu65260 Firmware 140Cpu65860 Firmware 140Cpu65160S Firmware 140Cpu65150C Firmware 140Cpu31110C Firmware 140Cpu43412Uc Firmware 140Cpu65160C Firmware 140Cpu65260C Firmware 140Cpu65860C Firmware Modicon M340 Bmxp341000 Firmware Modicon M340 Bmxp342000 Firmware Modicon M340 Bmxp3420102 Firmware Modicon M340 Bmxp3420102Cl Firmware Modicon M340 Bmxp342020 Firmware Modicon M340 Bmxp3420302 Firmware Modicon M340 Bmxp3420302Cl Firmware Modicon M340 Bmxp3420302H Firmware Modicon M340 Bmxp342020H Firmware Modicon M340 Bmxp341000H Firmware Tsxh5724M Firmware Tsxh5744M Firmware Tsxp57104M Firmware Tsxp57154M Firmware Tsxp571634M Firmware Tsxp57204M Firmware Tsxp57254M Firmware Tsxp572634M Firmware Tsxp57304M Firmware Tsxp57354M Firmware Tsxp573634M Firmware Tsxp57454M Firmware Tsxp574634M Firmware Tsxp575634M Firmware Tsxp576634M Firmware Tsxh5724Mc Firmware Tsxh5744Mc Firmware Tsxp57104Mc Firmware Tsxp57154Mc Firmware Tsxp571634Mc Firmware Tsxp57204Mc Firmware Tsxp57254Mc Firmware Tsxp572634Mc Firmware Tsxp57304Mc Firmware Tsxp57354Mc Firmware Tsxp573634Mc Firmware Tsxp57454Mc Firmware Tsxp574634Mc Firmware Tsxp57554Mc Firmware Tsxp575634Mc Firmware Tsxp576634Mc Firmware Tsxp57554M Firmware
9.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Apr 18, 2018 - 20:29 nvd
CRITICAL 9.8

DescriptionNVD

A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.

AnalysisAI

A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution. Affected products include: Schneider-Electric Bmxnor0200 Firmware, Schneider-Electric Bmxnor0200H Firmware, Schneider-Electric 140Cpu65150 Firmware, Schneider-Electric 140Cpu31110 Firmware, Schneider-Electric 140Cpu43412U Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Bmxnor0200 Firmware

View all
CVE-2018-7760 CRITICAL
9.8 Apr 18

An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC,
CVE-2018-7242 CRITICAL
9.8 Apr 18

Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200
CVE-2018-7241 CRITICAL
9.8 Apr 18

Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 control
CVE-2018-7762 HIGH
7.5 Apr 18

A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premiu
CVE-2018-7759 HIGH
7.5 Apr 18

A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNO

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique RCE

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8

Share

CVE-2018-7761 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy