CVE-2013-0664: High severity Schneider-electric Modicon Quantum Plc vulnerability
The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0664?
CVE-2013-0664 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2013-0664?
To fix CVE-2013-0664, update the affected Schneider Electric PLC modules to the latest firmware version provided by Schneider Electric.
Who is affected by CVE-2013-0664?
CVE-2013-0664 affects users of Schneider Electric Quantum 140NOE77111, 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules.
What kind of attack does CVE-2013-0664 allow?
CVE-2013-0664 allows authenticated remote users to execute arbitrary code by sending crafted Modbus messages in SOAP HTTP POST requests.
Is CVE-2013-0664 a local or remote vulnerability?
CVE-2013-0664 is a remote vulnerability, requiring only authenticated access to exploit the flaw.