CVE-2020-7563: High severity Schneider-electric Modicon Tsxety4103 Firmware vulnerability
Published Nov 18, 2020
·Updated
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.
Affected Software
80 affected components
Schneider-electric Modicon Tsxety4103 Firmware
Schneider-electric Modicon Tsxety4103
Schneider-electric Modicon Tsxety5103 Firmware
Schneider-electric Modicon Tsxety5103
Schneider-electric Modicon Tsxp574634 Firmware
Schneider-electric Modicon Tsxp574634
Schneider-electric Modicon Tsxp575634 Firmware
Schneider-electric Modicon Tsxp575634
Schneider-electric Modicon Tsxp576634 Firmware
Schneider-electric Modicon Tsxp576634
Schneider-electric Modicon Quantum 140noe77101 Firmware
Schneider-electric Modicon Quantum 140noe77101
Schneider-electric Modicon Quantum 140noe77111 Firmware
Schneider-electric Modicon Quantum 140noe77111
Schneider-electric Modicon Quantum 140noc78100 Firmware
Schneider-electric Modicon Quantum 140noc78100
Schneider-electric Modicon Quantum 140cpu65150 Firmware
Schneider-electric Modicon Quantum 140cpu65150
Schneider-electric Modicon Quantum 140cpu65150c Firmware
Schneider-electric Modicon Quantum 140cpu65150c
Schneider-electric Modicon Quantum 140cpu65160c Firmware
Schneider-electric Modicon Quantum 140cpu65160c
Schneider-electric Modicon Quantum 140cpu65160 Firmware
Schneider-electric Modicon Quantum 140cpu65160
Schneider-electric Modicon M340 Bmx P34-2010 Firmware
Schneider-electric Modicon M340 Bmx P34-2010
Schneider-electric Modicon M340 Bmx P34-2030 Firmware
Schneider-electric Modicon M340 Bmx P34-2030
Schneider-electric Modicon M340 Bmx Noc 0401 Firmware
Schneider-electric Modicon M340 Bmx Noc 0401
Schneider-electric Modicon M340 Bmx Noe 0100 Firmware
Schneider-electric Modicon M340 Bmx Noe 0100
Schneider-electric Modicon M340 Bmx Noe 0100h Firmware
Schneider-electric Modicon M340 Bmx Noe 0100h
Schneider-electric Modicon M340 Bmx Noe 0110 Firmware
Schneider-electric Modicon M340 Bmx Noe 0110
Schneider-electric Modicon M340 Bmx Noe 0110h Firmware
Schneider-electric Modicon M340 Bmx Noe 0110h
Schneider-electric Modicon M340 Bmx Nor 0200h Firmware
Schneider-electric Modicon M340 Bmx Nor 0200h
All of the following
Schneider-electric Modicon Tsxety4103 Firmware
Schneider-electric Modicon Tsxety4103
All of the following
Schneider-electric Modicon Tsxety5103 Firmware
Schneider-electric Modicon Tsxety5103
All of the following
Schneider-electric Modicon Tsxp574634 Firmware
Schneider-electric Modicon Tsxp574634
All of the following
Schneider-electric Modicon Tsxp575634 Firmware
Schneider-electric Modicon Tsxp575634
All of the following
Schneider-electric Modicon Tsxp576634 Firmware
Schneider-electric Modicon Tsxp576634
All of the following
Schneider-electric Modicon Quantum 140noe77101 Firmware
Schneider-electric Modicon Quantum 140noe77101
All of the following
Schneider-electric Modicon Quantum 140noe77111 Firmware
Schneider-electric Modicon Quantum 140noe77111
All of the following
Schneider-electric Modicon Quantum 140noc78100 Firmware
Schneider-electric Modicon Quantum 140noc78100
All of the following
Schneider-electric Modicon Quantum 140cpu65150 Firmware
Schneider-electric Modicon Quantum 140cpu65150
All of the following
Schneider-electric Modicon Quantum 140cpu65150c Firmware
Schneider-electric Modicon Quantum 140cpu65150c
All of the following
Schneider-electric Modicon Quantum 140cpu65160c Firmware
Schneider-electric Modicon Quantum 140cpu65160c
All of the following
Schneider-electric Modicon Quantum 140cpu65160 Firmware
Schneider-electric Modicon Quantum 140cpu65160
All of the following
Schneider-electric Modicon M340 Bmx P34-2010 Firmware
Schneider-electric Modicon M340 Bmx P34-2010
All of the following
Schneider-electric Modicon M340 Bmx P34-2030 Firmware
Schneider-electric Modicon M340 Bmx P34-2030
All of the following
Schneider-electric Modicon M340 Bmx Noc 0401 Firmware
Schneider-electric Modicon M340 Bmx Noc 0401
All of the following
Schneider-electric Modicon M340 Bmx Noe 0100 Firmware
Schneider-electric Modicon M340 Bmx Noe 0100
All of the following
Schneider-electric Modicon M340 Bmx Noe 0100h Firmware
Schneider-electric Modicon M340 Bmx Noe 0100h
All of the following
Schneider-electric Modicon M340 Bmx Noe 0110 Firmware
Schneider-electric Modicon M340 Bmx Noe 0110
All of the following
Schneider-electric Modicon M340 Bmx Noe 0110h Firmware
Schneider-electric Modicon M340 Bmx Noe 0110h
All of the following
Schneider-electric Modicon M340 Bmx Nor 0200h Firmware
Schneider-electric Modicon M340 Bmx Nor 0200h
Event History
Nov 18, 2020
CVE Published
via MITRE·01:50 PM
Data Sourced
via MITRE·01:50 PM
DescriptionWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-7563?
CVE-2020-7563 is classified as a critical severity vulnerability due to its potential for data corruption, crashes, and code execution.
2
How do I fix CVE-2020-7563?
To fix CVE-2020-7563, users should update their affected Schneider Electric Modicon devices with the latest firmware versions.
3
Which devices are affected by CVE-2020-7563?
CVE-2020-7563 affects Modicon M340, Modicon Quantum, and Modicon Premium legacy systems and their communication modules.
4
What can happen if CVE-2020-7563 is exploited?
Exploiting CVE-2020-7563 may lead to data corruption, system crashes, or unauthorized code execution on affected devices.
5
Is CVE-2020-7563 publicly known?
Yes, CVE-2020-7563 is publicly disclosed and reported in the Common Vulnerabilities and Exposures database.