CVE-2020-7549

CWE-7543 documents3 sources

Severity

5.3MEDIUM

EPSS

0.5%

top 33.11%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Schneider-electric 140noe77111 Firmware Schneider-electric Bmxnoe0100 Firmware Schneider-electric Bmxnoe0110 Firmware +7 more

Timeline

PublishedDec 11

Latest updateMay 24

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause denial of HTTP and FTP services when a series of specially crafted requests is sent to the controller over HTTP.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages10 packages

▶NVDschneider-electric/modicon_m340_bmxp341000_firmware< 3.30

▶NVDschneider-electric/modicon_m340_bmxp342000_firmware< 3.30

▶NVDschneider-electric/modicon_m340_bmxp342020_firmware< 3.30

▶NVDschneider-electric/modicon_m340_bmxp3420102_firmware< 3.30

▶NVDschneider-electric/modicon_m340_bmxp3420302_firmware< 3.30

🔴Vulnerability Details

GHSA

GHSA-mg3m-w94w-vr47: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum↗2022-05-24

▶

CVEList

CVE-2020-7549: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum↗2020-12-11

▶