Vulnerability in Schneider-Electric Modicom Bmxnor0200h
CVE-2018-7833
An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.014 (71.1th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 71st percentile — 71.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.014 · newest: 0.014 · change: 0.000
Affected products
- Schneider-Electric Modicom Bmxnor0200h
- Schneider-Electric Modicom Bmxnor0200h Firmware
- Schneider-Electric Modicom M340
- Schneider-Electric Modicom M340 Firmware
- Schneider-Electric Modicom Premium
- Schneider-Electric Modicom Premium Firmware
- Schneider-Electric Modicom Quantum
- Schneider-Electric Modicom Quantum Firmware
- Schneider Electric Se Embedded Web Servers In All Modicon M340, Premium, Quantum Plcs And Bmxnor0200 — versions Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200
Weakness classification (CWE)
References
- www.schneider-electric.com/en/download/document/SEVD-2018-327-01/ (Vendor Advisory)
Frequently asked questions
- What is CVE-2018-7833?
- CVE-2018-7833 is a high-severity vulnerability in Schneider-Electric Modicom Bmxnor0200h, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 7.5/10. Published 2018-12-17.
- How severe is CVE-2018-7833?
- High severity. CVSS v3 base score is 7.5 out of 10.