CVE-2013-0664
First published: Thu Apr 04 2013(Updated: )
The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Modicon Quantum Plc | =140noe77111 | |
| Schneider-electric Modicon Quantum Plc | =140nwm10000 | |
| Schneider-electric Modicon M340 | =bmxnoe0110x | |
| Schneider-electric Modicon Premium | =tsxety5103 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf
- http://www.schneider-electric.com/download/ww/en/details/35081317-Vulnerability-Disclosure-for-Quantum-Premium-and-M340/
- http://www.schneider-electric.com/download/ww/en/file/36555639-SEVD-2013-023-01.pdf/?fileName=SEVD-2013-023-01.pdf&reference=SEVD-2013-023-01&docType=Technical-paper
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/schneider-electric
- canonical/schneider-electric modicon quantum plc
- version/schneider-electric modicon quantum plc/140noe77111
- version/schneider-electric modicon quantum plc/140nwm10000
- canonical/schneider-electric modicon m340
- version/schneider-electric modicon m340/bmxnoe0110x
- canonical/schneider-electric modicon premium
- version/schneider-electric modicon premium/tsxety5103