CVE-2014-0754
Description
Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric tsxety4103_firmware | No range specified | — |
| schneider-electric stbnic2212_firmware | No range specified | — |
| schneider-electric stbnip2212_firmware | No range specified | — |
| schneider-electric tsxetc0101_firmware | No range specified | — |
| schneider-electric tsxetc100_firmware | No range specified | — |
| schneider-electric tsxp573623mc_firmware | No range specified | — |
| schneider-electric tsxety110ws_firmware | No range specified | — |
| schneider-electric tsxp574634m_firmware | No range specified | — |
| schneider-electric tsxety110wsc_firmware | No range specified | — |
| schneider-electric tsxp574823am_firmware | No range specified | — |
| schneider-electric tsxp574823m_firmware | No range specified | — |
| schneider-electric tsxety4103c_firmware | No range specified | — |
| schneider-electric tsxp574823mc_firmware | No range specified | — |
| schneider-electric tsxety5103_firmware | No range specified | — |
| schneider-electric tsxp575634m_firmware | No range specified | — |
| schneider-electric tsxety5103c_firmware | No range specified | — |
| schneider-electric tsxp576634m_firmware | No range specified | — |
| schneider-electric tsxetz410_firmware | No range specified | — |
| schneider-electric tsxwmy100_firmware | No range specified | — |
| schneider-electric tsxetz510_firmware | No range specified | — |
| schneider-electric tsxwmy100c_firmware | No range specified | — |
| schneider-electric tsxntp100_firmware | No range specified | — |
| schneider-electric modicon_m580_bmxnoc0402_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxnoe0100_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxnoe0110_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxnoe0110h_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxnor0200h_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp342020_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp342020h_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp342030_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp3420302_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp3420302h_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp342030h_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxnoc0401_firmware | No range specified | — |
| schneider-electric 171ccc96020_firmware | No range specified | — |
| schneider-electric 171ccc96020c_firmware | No range specified | — |
| schneider-electric 171ccc96030_firmware | No range specified | — |
| schneider-electric 171ccc96030c_firmware | No range specified | — |
| schneider-electric 171ccc98020_firmware | No range specified | — |
| schneider-electric 171ccc98030_firmware | No range specified | — |
| schneider-electric tsxp571634m_firmware | No range specified | — |
| schneider-electric tsxp572634m_firmware | No range specified | — |
| schneider-electric tsxp573634m_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.