CVE-2018-7809
First published: Fri Nov 30 2018(Updated: )
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the password delete function of the web server.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider Electric Modicon M340 Firmware | ||
| Schneider Electric Modicon M340 Firmware | ||
| Schneider Electric Modicon Premium | ||
| Schneider Electric Modicon Premium | ||
| Schneider Electric Modicon Quantum Firmware | ||
| Schneider Electric Modicon Quantum | ||
| Schneider Electric Modicon BMXNOR0200H Firmware | ||
| Schneider Electric Modicon BMXNOR0200H |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-7809?
CVE-2018-7809 has been classified as a high severity vulnerability due to its potential to allow unauthorized remote access.
How do I fix CVE-2018-7809?
To resolve CVE-2018-7809, it is recommended to update to the latest firmware version provided by Schneider Electric.
What devices are affected by CVE-2018-7809?
CVE-2018-7809 affects the embedded web servers in all Modicon M340, Premium, Quantum PLCs, and BMXNOR0200 models.
Can CVE-2018-7809 be exploited remotely?
Yes, CVE-2018-7809 allows unauthenticated remote users to access certain functionalities, making remote exploitation possible.
What type of attack does CVE-2018-7809 enable?
CVE-2018-7809 enables unauthorized users to potentially delete passwords through the web server.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/schneider-electric
- canonical/schneider electric modicon m340 firmware
- canonical/schneider electric modicon premium
- canonical/schneider electric modicon quantum firmware
- canonical/schneider electric modicon quantum
- canonical/schneider electric modicon bmxnor0200h firmware
- canonical/schneider electric modicon bmxnor0200h