Modicom Quantum Firmware vulnerabilities | LiveThreat CVE Feed

Product

Modicom Quantum Firmware

by Schneider-electric · last CVE Dec 17, 2018

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 2High 4Medium 2Low 0

Severity

All severities8 Critical2 High4 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Modicom Quantum Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-7811	9.8	3%	Nov 30	An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated… Affected: All versions, or not specified
CVE-2018-7809	9.8	2%	Nov 30	An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated… Affected: All versions, or not specified
CVE-2018-7831	8.8	1%	Nov 30	An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and… Affected: All versions, or not specified
CVE-2018-7833	7.5	1%	Dec 17	An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an… Affected: All versions, or not specified
CVE-2018-7812	7.5	4%	Dec 17	An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where the web server sends… Affected: All versions, or not specified
CVE-2018-7830	7.5	2%	Nov 30	Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs… Affected: All versions, or not specified
CVE-2018-7804	6.1	1%	Dec 17	A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially… Affected: All versions, or not specified
CVE-2018-7810	6.1	1%	Nov 30	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs… Affected: All versions, or not specified