CVE-2018-7760
Critical
Description
An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSchneider-electric Bmxnor0200 Firmware
PublishedApr 18, 2018
First seenApr 18, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric bmxnor0200_firmware | No range specified | — |
| schneider-electric bmxnor0200h_firmware | No range specified | — |
| schneider-electric 140cpu65150_firmware | No range specified | — |
| schneider-electric 140cpu31110_firmware | No range specified | — |
| schneider-electric 140cpu43412u_firmware | No range specified | — |
| schneider-electric 140cpu65160_firmware | No range specified | — |
| schneider-electric 140cpu65260_firmware | No range specified | — |
| schneider-electric 140cpu65860_firmware | No range specified | — |
| schneider-electric 140cpu65160s_firmware | No range specified | — |
| schneider-electric 140cpu65150c_firmware | No range specified | — |
| schneider-electric 140cpu31110c_firmware | No range specified | — |
| schneider-electric 140cpu43412uc_firmware | No range specified | — |
| schneider-electric 140cpu65160c_firmware | No range specified | — |
| schneider-electric 140cpu65260c_firmware | No range specified | — |
| schneider-electric 140cpu65860c_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp341000_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp342000_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp3420102_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp3420102cl_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp342020_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp3420302_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp3420302cl_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp3420302h_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp342020h_firmware | No range specified | — |
| schneider-electric modicon_m340_bmxp341000h_firmware | No range specified | — |
| schneider-electric tsxh5724m_firmware | No range specified | — |
| schneider-electric tsxh5744m_firmware | No range specified | — |
| schneider-electric tsxp57104m_firmware | No range specified | — |
| schneider-electric tsxp57154m_firmware | No range specified | — |
| schneider-electric tsxp571634m_firmware | No range specified | — |
| schneider-electric tsxp57204m_firmware | No range specified | — |
| schneider-electric tsxp57254m_firmware | No range specified | — |
| schneider-electric tsxp572634m_firmware | No range specified | — |
| schneider-electric tsxp57304m_firmware | No range specified | — |
| schneider-electric tsxp57354m_firmware | No range specified | — |
| schneider-electric tsxp573634m_firmware | No range specified | — |
| schneider-electric tsxp57454m_firmware | No range specified | — |
| schneider-electric tsxp574634m_firmware | No range specified | — |
| schneider-electric tsxp575634m_firmware | No range specified | — |
| schneider-electric tsxp576634m_firmware | No range specified | — |
| schneider-electric tsxh5724mc_firmware | No range specified | — |
| schneider-electric tsxh5744mc_firmware | No range specified | — |
| schneider-electric tsxp57104mc_firmware | No range specified | — |
| schneider-electric tsxp57154mc_firmware | No range specified | — |
| schneider-electric tsxp571634mc_firmware | No range specified | — |
| schneider-electric tsxp57204mc_firmware | No range specified | — |
| schneider-electric tsxp57254mc_firmware | No range specified | — |
| schneider-electric tsxp572634mc_firmware | No range specified | — |
| schneider-electric tsxp57304mc_firmware | No range specified | — |
| schneider-electric tsxp57354mc_firmware | No range specified | — |
| schneider-electric tsxp573634mc_firmware | No range specified | — |
| schneider-electric tsxp57454mc_firmware | No range specified | — |
| schneider-electric tsxp574634mc_firmware | No range specified | — |
| schneider-electric tsxp57554mc_firmware | No range specified | — |
| schneider-electric tsxp575634mc_firmware | No range specified | — |
| schneider-electric tsxp576634mc_firmware | No range specified | — |
| schneider-electric tsxp57554m_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.