CVE-2018-7809: Critical severity schneider electric modicon m340 firmware vulnerability
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the password delete function of the web server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7809?
CVE-2018-7809 has been classified as a high severity vulnerability due to its potential to allow unauthorized remote access.
How do I fix CVE-2018-7809?
To resolve CVE-2018-7809, it is recommended to update to the latest firmware version provided by Schneider Electric.
What devices are affected by CVE-2018-7809?
CVE-2018-7809 affects the embedded web servers in all Modicon M340, Premium, Quantum PLCs, and BMXNOR0200 models.
Can CVE-2018-7809 be exploited remotely?
Yes, CVE-2018-7809 allows unauthenticated remote users to access certain functionalities, making remote exploitation possible.
What type of attack does CVE-2018-7809 enable?
CVE-2018-7809 enables unauthorized users to potentially delete passwords through the web server.