First published: Mon Mar 23 2020(Updated: )
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 (Versions 7.0 and prior), Quantum processors with integrated Ethernet – 140CPU65xxxxx (all Versions), and Premium processors with integrated Ethernet (all Versions), which could cause a Denial of Service when sending a specially crafted command over Modbus.
Credit: cybersecurity@se.com
Affected Software | Affected Version | How to fix |
---|---|---|
Schneider Electric 140NOE77101 | <=7.0 | |
Schneider-electric Quantum Ethernet Module 140noe77101 | ||
Schneider Electric 140NOE77111 | <=7.0 | |
Schneider Electric 140NOE77111 | ||
Schneider Electric TSXH5744M Firmware | ||
Schneider Electric TSXH5744M Firmware | ||
Schneider Electric TSXH5724M | ||
schneider-electric tsxh5724m firmware | ||
schneider-electric tsxp576634mc firmware | ||
schneider-electric tsxp576634m firmware | ||
Schneider Electric TSX P57554M Firmware | ||
Schneider Electric TSXP57554M | ||
schneider-electric tsxp575634m firmware | ||
Schneider Electric TSXP575634M | ||
Schneider Electric TSXP57454M Firmware | ||
Schneider Electric TSXP57454M | ||
schneider-electric tsxp574634m firmware | ||
Schneider Electric TSXP574634M | ||
Schneider Electric TSXP573634M Firmware | ||
Schneider Electric TSXP573634M | ||
Schneider Electric TSXP57304M Firmware | ||
Schneider Electric TSXP57304M Firmware | ||
schneider-electric tsxp57254m firmware | ||
schneider-electric tsxp57254m firmware | ||
Schneider Electric TSXP572634M Firmware | ||
Schneider Electric TSXP572634M | ||
Schneider Electric TSXP57204M Firmware | ||
Schneider Electric TSXP57204M | ||
schneider-electric tsxp571634mc firmware | ||
Schneider Electric TSXP571634M Firmware | ||
Schneider Electric TSXP57154M Firmware | ||
Schneider Electric TSXP57154M | ||
Schneider Electric TSXP57104M | ||
Schneider Electric TSXp57104MC | ||
Schneider Electric 140CPU65150 Firmware | ||
Schneider Electric 140CPU65150 Firmware | ||
Schneider Electric 140CPU65160 Firmware | ||
Schneider Electric 140CPU65160 | ||
Schneider Electric 140CPU65260 Firmware | ||
Schneider Electric 140CPU65260C | ||
Schneider Electric 140CPU67261 Firmware | ||
Schneider Electric 140CPU67261 Firmware | ||
Schneider Electric 140CPU67060 Firmware | ||
Schneider Electric 140CPU67060 Firmware | ||
Schneider Electric 140CPU67160 Firmware | ||
Schneider Electric 140CPU67160 Firmware | ||
Schneider Electric 140CPU67260 | ||
Schneider Electric 140CPU67260 | ||
Schneider Electric 140CPU65860 | ||
Schneider Electric 140CPU65860 | ||
Schneider Electric 140CPU67861 Firmware | ||
schneider-electric 140cpu67861 | ||
Schneider Electric 140CPU65160S Firmware | ||
Schneider Electric 140CPU65160S Firmware | ||
Schneider Electric 140CPU67160S Firmware | ||
Schneider Electric 140CPU67160S Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2020-7477 is high with a severity value of 7.5.
Versions 7.0 and prior of the Quantum Ethernet Network module 140NOE771x1, Quantum processors with integrated Ethernet – 140CPU65xxxxx, and Premium processors with integrated Ethernet are affected by CVE-2020-7477.
To fix CVE-2020-7477, update the affected software versions to a version higher than 7.0.
The CWE-ID of CVE-2020-7477 is CWE-754.
You can find more information about CVE-2020-7477 at the following link: [CVE-2020-7477](https://www.se.com/ww/en/download/document/SEVD-2020-070-02/)