CVE-2020-7540

published 2020-12-11

CVE-2020-7540: A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon…

Priority P2 65 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.

Affected

22 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	140cpu65150_firmware	< 6.1	6.1
schneider-electric	140cpu65160_firmware	< 6.1	6.1
schneider-electric	140noc77101_firmware	< 1.08	1.08
schneider-electric	140noc78000_firmware	< 1.74	1.74
schneider-electric	140noc78100_firmware	< 1.74	1.74
schneider-electric	140noe77101_firmware	< 7.1	7.1
schneider-electric	140noe77111_firmware	< 7.1	7.1
schneider-electric	bmxnoc0401_firmware	< 2.10	2.10
schneider-electric	bmxnoe0100_firmware	< 3.3	3.3
schneider-electric	bmxnoe0110_firmware	< 6.5	6.5
schneider-electric	modicon_m340_bmxp341000_firmware	< 3.30	3.30
schneider-electric	modicon_m340_bmxp342000_firmware	< 3.30	3.30
schneider-electric	modicon_m340_bmxp3420102_firmware	< 3.30	3.30
schneider-electric	modicon_m340_bmxp3420102cl_firmware	< 3.30	3.30
schneider-electric	modicon_m340_bmxp342020_firmware	< 3.30	3.30
schneider-electric	modicon_m340_bmxp3420302_firmware	< 3.30	3.30
schneider-electric	modicon_m340_bmxp3420302cl_firmware	< 3.30	3.30
schneider-electric	tsxety4103_firmware	< 6.2	6.2
schneider-electric	tsxety5103_firmware	< 6.4	6.4
schneider-electric	tsxp574634_firmware	< 6.1	6.1
schneider-electric	tsxp575634_firmware	< 6.1	6.1
schneider-electric	tsxp576634_firmware	< 6.1	6.1

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-306