CVE-2011-4859
Description
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric quantum_ethernet_module_140cpu65150 | v ≤ 3.5 | — |
| schneider-electric quantum_ethernet_module_140cpu65160 | v ≤ 3.5 | — |
| schneider-electric quantum_ethernet_module_140cpu65260 | v ≤ 3.5 | — |
| schneider-electric quantum_ethernet_module_140noe77100 | v ≤ 3.3, v ≤ 3.4 | — |
| schneider-electric quantum_ethernet_module_140noe77101 | v ≤ 4.9 | — |
| schneider-electric quantum_ethernet_module_140noe77111 | v ≤ 5.0 | — |
| schneider-electric premium_ethernet_module_tsxety4103 | v ≤ 5.0 | — |
| schneider-electric premium_ethernet_module_tsxety5103 | v ≤ 5.0 | — |
| schneider-electric premium_ethernet_module_tsxp57163m | v ≤ 4.9 | — |
| schneider-electric premium_ethernet_module_tsxp572634m | v ≤ 4.9 | — |
| schneider-electric premium_ethernet_module_tsxp573634m | v ≤ 4.9 | — |
| schneider-electric premium_ethernet_module_tsxp574634m | v ≤ 3.5 | — |
| schneider-electric premium_ethernet_module_tsxp575634m | v ≤ 3.5 | — |
| schneider-electric premium_ethernet_module_tsxp576634m | v ≤ 3.5 | — |
| schneider-electric m340_ethernet_module_bmxnoe0100 | v ≤ 2.3 | — |
| schneider-electric m340_ethernet_module_bmxnoe0110 | v ≤ 4.65 | — |
| schneider-electric m340_ethernet_module_bmxp342020 | v ≤ 2.2 | — |
| schneider-electric m340_ethernet_module_bmxp342030 | v ≤ 2.2 | — |
| schneider-electric stb_dio_ethernet_module_stbnic2212 | v ≤ 2.10 | — |
| schneider-electric stb_dio_ethernet_module_stbnip2212 | v ≤ 2.73 | — |
| schneider-electric stb_dio_ethernet_module_stbnip2311 | v ≤ 3.01 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.