What is the CVSS score of CVE-2020-7477?

CVE-2020-7477 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.5%.

140Noe77101 Firmware CVE-2020-7477

HIGH

Improper Check for Unusual or Exceptional Conditions (CWE-754)

2020-03-23 cybersecurity@se.com

Denial Of Service 140Noe77101 Firmware 140Noe77111 Firmware Tsxh5744M Firmware Tsxh5724M Firmware Tsxp576634M Firmware Tsxp57554M Firmware Tsxp575634M Firmware Tsxp57454M Firmware Tsxp574634M Firmware Tsxp573634M Firmware Tsxp57304M Firmware Tsxp57254M Firmware Tsxp572634M Firmware Tsxp57204M Firmware Tsxp571634M Firmware Tsxp57154M Firmware Tsxp57104M Firmware 140Cpu65150 Firmware 140Cpu65160 Firmware 140Cpu65260 Firmware 140Cpu67261 Firmware 140Cpu67060 Firmware 140Cpu67160 Firmware 140Cpu67260 Firmware 140Cpu65860 Firmware 140Cpu67861 Firmware 140Cpu65160S Firmware 140Cpu67160S Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Mar 23, 2020 - 20:15 cve.org

HIGH 7.5

DescriptionCVE.org

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 (Versions 7.0 and prior), Quantum processors with integrated Ethernet - 140CPU65xxxxx (all Versions), and Premium processors with integrated Ethernet (all Versions), which could cause a Denial of Service when sending a specially crafted command over Modbus.

AnalysisAI

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 (Versions 7.0 and prior), Quantum processors with integrated. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-754. A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 (Versions 7.0 and prior), Quantum processors with integrated Ethernet - 140CPU65xxxxx (all Versions), and Premium processors with integrated Ethernet (all Versions), which could cause a Denial of Service when sending a specially crafted command over Modbus. Affected products include: Schneider-Electric 140Noe77101 Firmware, Schneider-Electric 140Noe77111 Firmware, Schneider-Electric Tsxh5744M Firmware, Schneider-Electric Tsxh5724M Firmware, Schneider-Electric Tsxp576634M Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.