Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-7240

A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.

Published

2018-04-18T20:29:00.247

Last Modified

2024-11-21T04:11:51.400

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 8.8 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System schneider-electric 140cpu65150_firmware - Yes
Hardware schneider-electric 140cpu65150 - No
Operating System schneider-electric 140cpu31110_firmware - Yes
Hardware schneider-electric 140cpu31110 - No
Operating System schneider-electric 140cpu43412u_firmware - Yes
Hardware schneider-electric 140cpu43412u - No
Operating System schneider-electric 140cpu65160_firmware - Yes
Hardware schneider-electric 140cpu65160 - No
Operating System schneider-electric 140cpu65260_firmware - Yes
Hardware schneider-electric 140cpu65260 - No
Operating System schneider-electric 140cpu65860_firmware - Yes
Hardware schneider-electric 140cpu65860 - No
Operating System schneider-electric 140cpu65160s_firmware - Yes
Hardware schneider-electric 140cpu65160s - No
Operating System schneider-electric 140cpu65150c_firmware - Yes
Hardware schneider-electric 140cpu65150c - No
Operating System schneider-electric 140cpu31110c_firmware - Yes
Hardware schneider-electric 140cpu31110c - No
Operating System schneider-electric 140cpu43412uc_firmware - Yes
Hardware schneider-electric 140cpu43412uc - No
Operating System schneider-electric 140cpu65160c_firmware - Yes
Hardware schneider-electric 140cpu65160c - No
Operating System schneider-electric 140cpu65160c_firmware - Yes
Hardware schneider-electric 140cpu65160c - No
Operating System schneider-electric 140cpu65260c_firmware - Yes
Hardware schneider-electric 140cpu65260c - No
Operating System schneider-electric 140cpu65860c_firmware - Yes
Hardware schneider-electric 140cpu65860c - No
References