CVE-2020-7539

CWE-7543 documents3 sources

Severity

7.5HIGH

EPSS

0.4%

top 39.74%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Schneider-electric 140cpu65150 Firmware Schneider-electric 140noc77101 Firmware Schneider-electric 140noc78000 Firmware +17 more

Timeline

PublishedDec 11

Latest updateMay 24

Description

A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause a denial of service vulnerability when a specially crafted packet is sent to the controller over HTTP.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages20 packages

▶NVDschneider-electric/modicon_m340_bmxp341000_firmware< 3.30

▶NVDschneider-electric/modicon_m340_bmxp342000_firmware< 3.30

▶NVDschneider-electric/modicon_m340_bmxp342020_firmware< 3.30

▶NVDschneider-electric/modicon_m340_bmxp3420102_firmware< 3.30

▶NVDschneider-electric/modicon_m340_bmxp3420302_firmware< 3.30

🔴Vulnerability Details

GHSA

GHSA-x6hc-2whc-99qv: A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum a↗2022-05-24

▶

CVEList

CVE-2020-7539: A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum a↗2020-12-11

▶