Critical severity · published Apr 18, 2018
CVE-2018-7241
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules
9.8
CVSS
3.7%
EPSS
No
On KEV
Description
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
1F
140cpu31110 Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu31110c Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu43412u Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu43412uc Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65150 Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65150c Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65160 Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65160c Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65160s Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65260 Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65260c Firmware · Schneider-electric
All versions, or not specified · source: NVD
1F
140cpu65860 Firmware · Schneider-electric
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-7241
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-7241
Third Party Advisory
http://www.securityfocus.com/bid/103542
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01
Vendor Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/
More from 140cpu31110 Firmware
9.8
CVE-2018-7761
A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution
9.8
CVE-2018-7760
An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200
9.8
CVE-2018-7242
Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules
8.8
CVE-2018-7240
A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution
7.5
CVE-2018-7762
A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result…