CVE-2015-6461

2019-03-2118:17:48

CWE-98

icscert

www.cve.org

0.001 Low

EPSS

Percentile

32.2%

JSON

Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will result in the browser redirecting to a remote file via a Java script loaded with the web page.

CNA Affected

[
  {
    "product": "Schneider Electric Modicon PLC",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H."
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-15-246-02

0.001 Low

EPSS

Percentile

32.2%

JSON

Related for CVELIST:CVE-2015-6461