High severity · published Nov 18, 2020
CVE-2020-7563
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see…
8.8
CVSS
1.1%
EPSS
No
On KEV
Description
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
Modicon M340 Bmx Noc 0401 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmx Noe 0100 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmx Noe 0100h Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmx Noe 0110 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmx Noe 0110h Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmx Nor 0200h Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmx P34-2010 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MM
Modicon M340 Bmx P34-2030 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MQ
Modicon Quantum 140cpu65150 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MQ
Modicon Quantum 140cpu65150c Firmware · Schneider-electric
All versions, or not specified · source: NVD
MQ
Modicon Quantum 140cpu65160 Firmware · Schneider-electric
All versions, or not specified · source: NVD
MQ
Modicon Quantum 140cpu65160c Firmware · Schneider-electric
All versions, or not specified · source: NVD
Affected product
MM
Modicon M340 Bmx Noc 0401 Firmware
Schneider-electric
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-7563
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-7563
Vendor Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-315-01/
More from Modicon M340 Bmx Noc 0401 Firmware
8.8
CVE-2020-7564
A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium…
8.1
CVE-2020-7562
A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see…
–
CVE-2013-2763
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors