Skip to main content

Bmxnor0200 Firmware CVE-2018-7762

HIGH
Buffer Overflow (CWE-119)
2018-04-18 cybersecurity@se.com
Schneider Electric Buffer Overflow Bmxnor0200 Firmware Bmxnor0200H Firmware 140Cpu65150 Firmware 140Cpu31110 Firmware 140Cpu43412U Firmware 140Cpu65160 Firmware 140Cpu65260 Firmware 140Cpu65860 Firmware 140Cpu65160S Firmware 140Cpu65150C Firmware 140Cpu31110C Firmware 140Cpu43412Uc Firmware 140Cpu65160C Firmware 140Cpu65260C Firmware 140Cpu65860C Firmware Modicon M340 Bmxp341000 Firmware Modicon M340 Bmxp342000 Firmware Modicon M340 Bmxp3420102 Firmware Modicon M340 Bmxp3420102Cl Firmware Modicon M340 Bmxp342020 Firmware Modicon M340 Bmxp3420302 Firmware Modicon M340 Bmxp3420302Cl Firmware Modicon M340 Bmxp3420302H Firmware Modicon M340 Bmxp342020H Firmware Modicon M340 Bmxp341000H Firmware Tsxh5724M Firmware Tsxh5744M Firmware Tsxp57104M Firmware Tsxp57154M Firmware Tsxp571634M Firmware Tsxp57204M Firmware Tsxp57254M Firmware Tsxp572634M Firmware Tsxp57304M Firmware Tsxp57354M Firmware Tsxp573634M Firmware Tsxp57454M Firmware Tsxp574634M Firmware Tsxp575634M Firmware Tsxp576634M Firmware Tsxh5724Mc Firmware Tsxh5744Mc Firmware Tsxp57104Mc Firmware Tsxp57154Mc Firmware Tsxp571634Mc Firmware Tsxp57204Mc Firmware Tsxp57254Mc Firmware Tsxp572634Mc Firmware Tsxp57304Mc Firmware Tsxp57354Mc Firmware Tsxp573634Mc Firmware Tsxp57454Mc Firmware Tsxp574634Mc Firmware Tsxp57554Mc Firmware Tsxp575634Mc Firmware Tsxp576634Mc Firmware Tsxp57554M Firmware
7.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Apr 18, 2018 - 20:29 nvd
HIGH 7.5

DescriptionNVD

A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result in a buffer overflow.

AnalysisAI

A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result in a buffer. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result in a buffer overflow. Affected products include: Schneider-Electric Bmxnor0200 Firmware, Schneider-Electric Bmxnor0200H Firmware, Schneider-Electric 140Cpu65150 Firmware, Schneider-Electric 140Cpu31110 Firmware, Schneider-Electric 140Cpu43412U Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

More in Bmxnor0200 Firmware

View all
CVE-2018-7761 CRITICAL
9.8 Apr 18

A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum
CVE-2018-7760 CRITICAL
9.8 Apr 18

An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC,
CVE-2018-7242 CRITICAL
9.8 Apr 18

Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200
CVE-2018-7241 CRITICAL
9.8 Apr 18

Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 control
CVE-2018-7759 HIGH
7.5 Apr 18

A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNO

Same weakness CWE-119 – Buffer Overflow

View all
CVE-2017-11882 HIGH POC
7.8
CVE-2014-6332 HIGH POC
8.8
CVE-2023-4966 CRITICAL POC
9.4
CVE-2015-2426 HIGH POC
8.8
CVE-2013-3918 HIGH POC
8.8
CVE-2017-11774 HIGH POC
7.8
CVE-2013-3660 HIGH POC
7.8
CVE-2017-6736 HIGH POC
8.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2017-11882 HIGH POC
7.8
CVE-2010-3333 HIGH POC
7.8

Share

CVE-2018-7762 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy