CVE-2011-4861: Critical severity schneider electric quantum ethernet module 140noe77101 vulnerability
The modbus125handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771 module) allows remote attackers to install arbitrary firmware updates via a MODBUS 125 function code to TCP port 502.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4861?
CVE-2011-4861 has a high severity rating due to the potential for remote attackers to install arbitrary firmware updates.
How can I mitigate CVE-2011-4861?
Mitigation for CVE-2011-4861 includes restricting access to TCP port 502 and applying any available firmware updates from Schneider Electric.
What devices are affected by CVE-2011-4861?
CVE-2011-4861 affects Schneider Electric Quantum Ethernet Modules including 140NOE77100, 140NOE77101, and 140NOE77111.
What kind of attacks can exploit CVE-2011-4861?
CVE-2011-4861 can be exploited by remote attackers to perform unauthorized firmware updates through MODBUS 125 function code.
Is there a patch available for CVE-2011-4861?
Yes, Schneider Electric provides firmware updates as a patch for the vulnerabilities described in CVE-2011-4861.