Critical severity · published Nov 30, 2018
CVE-2018-7809
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated…
9.8
CVSS
2.5%
EPSS
No
On KEV
Description
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the password delete function of the web server.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MB
Modicom Bmxnor0200h Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicom M340 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MP
Modicom Premium Firmware · Schneider-electric
All versions, or not specified · source: NVD
MQ
Modicom Quantum Firmware · Schneider-electric
All versions, or not specified · source: NVD
Affected product
MB
Modicom Bmxnor0200h Firmware
Schneider-electric
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-7809
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-7809
Vendor Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
Exploit
https://www.tenable.com/security/research/tra-2018-38
More from Modicom Bmxnor0200h Firmware
9.8
CVE-2018-7811
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated…
8.8
CVE-2018-7831
An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and…
7.5
CVE-2018-7833
An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an…
7.5
CVE-2018-7812
An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where the web server sends…
7.5
CVE-2018-7830
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs…