CVE-2020-7541

published 2020-12-11

CVE-2020-7541: A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and…

Priority P4 29 medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of sensitive data when sending a specially crafted request to the controller over HTTP.

Affected

20 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	140cpu65150_firmware	< 6.1	6.1
schneider-electric	140noc77101_firmware	< 1.08	1.08
schneider-electric	140noc78000_firmware	< 1.74	1.74
schneider-electric	140noc78100_firmware	< 1.74	1.74
schneider-electric	140noe77111_firmware	< 7.1	7.1
schneider-electric	bmxnoc0401_firmware	< 2.10	2.10
schneider-electric	bmxnoe0100_firmware	< 3.3	3.3
schneider-electric	bmxnoe0110_firmware	< 6.5	6.5
schneider-electric	modicon_m340_bmxp341000_firmware	< 3.30	3.30
schneider-electric	modicon_m340_bmxp342000_firmware	< 3.30	3.30
schneider-electric	modicon_m340_bmxp3420102_firmware	< 3.30	3.30
schneider-electric	modicon_m340_bmxp3420102cl_firmware	< 3.30	3.30
schneider-electric	modicon_m340_bmxp342020_firmware	< 3.30	3.30
schneider-electric	modicon_m340_bmxp3420302_firmware	< 3.30	3.30
schneider-electric	modicon_m340_bmxp3420302cl_firmware	< 3.30	3.30
schneider-electric	tsxety4103_firmware	< 6.2	6.2
schneider-electric	tsxety5103_firmware	< 6.4	6.4
schneider-electric	tsxp574634_firmware	< 6.1	6.1
schneider-electric	tsxp575634_firmware	< 6.1	6.1
schneider-electric	tsxp576634_firmware	< 6.1	6.1

CVSS provenance

nvd v3.1 5.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-425