CVE-2020-7535

🗓️ 11 Dec 2020 00:51:37Reported by schneiderType

Improper Pathname Limitation in Modicon M340 Web Serve

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-7535	11 Dec 202007:35	–	circl
CNNVD	Schneider Electric Modicon M340 Path Traversal Vulnerability	11 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-7535	11 Dec 202000:51	–	cvelist
NCSC	Vulnerabilities fixed in Schneider Electric products	14 May 202100:00	–	ncsc
NVD	CVE-2020-7535	11 Dec 202001:15	–	nvd
OSV	CVE-2020-7535	11 Dec 202001:15	–	osv
Prion	Path traversal	11 Dec 202001:15	–	prion
Positive Technologies	PT-2020-6330 · Schneider Electric · Modicon M340 +2	8 Dec 202000:00	–	ptsecurity
RedhatCVE	CVE-2020-7535	22 May 202516:48	–	redhatcve
Tenable Nessus	Schneider Electric Modicon Path Traversal (CVE-2020-7535)	29 Jun 202300:00	–	nessus

NVD

Node

schneider-electric modicon_m340_bmxp341000_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp341000Match-

Node

schneider-electric modicon_m340_bmxp342000_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp342000Match-

Node

schneider-electric modicon_m340_bmxp3420102_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420102Match-

Node

schneider-electric modicon_m340_bmxp3420102cl_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420102clMatch-

Node

schneider-electric modicon_m340_bmxp342020_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp342020Match-

Node

schneider-electric modicon_m340_bmxp3420302_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420302Match-

Node

schneider-electric modicon_m340_bmxp3420302cl_firmwareRange<3.30

AND

schneider-electric modicon_m340_bmxp3420302clMatch-

Node

schneider-electric bmxnoe0100_firmwareRange<3.4

AND

schneider-electric bmxnoe0100Match-

Node

schneider-electric bmxnoe0110_firmwareRange<6.6

AND

schneider-electric bmxnoe0110Match-

Node

schneider-electric 140noe77101_firmwareRange<7.3

AND

schneider-electric 140noe77101Match-

Node

schneider-electric 140noe77111_firmwareRange<7.3

AND

schneider-electric 140noe77111Match-

Node

schneider-electric 140cpu65150_firmware

AND

schneider-electric 140cpu65150Match-

Node

schneider-electric 140cpu65160_firmware

AND

schneider-electric 140cpu65160Match-

Node

schneider-electric 140noc78000_firmware

AND

schneider-electric 140noc78000Match-

Node

schneider-electric 140noc78100_firmware

AND

schneider-electric 140noc78100Match-

Node

schneider-electric 140noc77101_firmware

AND

schneider-electric 140noc77101Match-

Node

schneider-electric tsxp574634_firmware

AND

schneider-electric tsxp574634Match-

Node

schneider-electric tsxp575634_firmware

AND

schneider-electric tsxp575634Match-

Node

schneider-electric tsxp576634_firmware

AND

schneider-electric tsxp576634Match-

Node

schneider-electric tsxety4103_firmware

AND

schneider-electric tsxety4103Match-

Node

schneider-electric tsxety5103_firmware

AND

schneider-electric tsxety5103Match-

[
  {
    "product": "Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions)"
      }
    ]
  }
]

Source	Link
se	www.se.com/ww/en/download/document/SEVD-2020-343-05/

21 Nov 2024 05:37Current

7.2High risk

Vulners AI Score7.2

CVSS 25

CVSS 3.17.5

EPSS0.00426

CWE-22