CVE-2013-0664
First published: Thu Apr 04 2013(Updated: )
The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider Electric Modicon Quantum PLC | =140noe77111 | |
| Schneider Electric Modicon Quantum PLC | =140nwm10000 | |
| Modicon M340 | =bmxnoe0110x | |
| Schneider Electric Modicon Premium | =tsxety5103 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf
- http://www.schneider-electric.com/download/ww/en/details/35081317-Vulnerability-Disclosure-for-Quantum-Premium-and-M340/
- http://www.schneider-electric.com/download/ww/en/file/36555639-SEVD-2013-023-01.pdf/?fileName=SEVD-2013-023-01.pdf&reference=SEVD-2013-023-01&docType=Technical-paper
Frequently Asked Questions
What is the severity of CVE-2013-0664?
CVE-2013-0664 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2013-0664?
To fix CVE-2013-0664, update the affected Schneider Electric PLC modules to the latest firmware version provided by Schneider Electric.
Who is affected by CVE-2013-0664?
CVE-2013-0664 affects users of Schneider Electric Quantum 140NOE77111, 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules.
What kind of attack does CVE-2013-0664 allow?
CVE-2013-0664 allows authenticated remote users to execute arbitrary code by sending crafted Modbus messages in SOAP HTTP POST requests.
Is CVE-2013-0664 a local or remote vulnerability?
CVE-2013-0664 is a remote vulnerability, requiring only authenticated access to exploit the flaw.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/references
- agent/author
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/schneider-electric
- canonical/schneider electric modicon quantum plc
- version/schneider electric modicon quantum plc/140noe77111
- version/schneider electric modicon quantum plc/140nwm10000
- canonical/modicon m340
- version/modicon m340/bmxnoe0110x
- canonical/schneider electric modicon premium
- version/schneider electric modicon premium/tsxety5103