CVE-2018-7240

2018-04-1820:00:00

schneider

www.cve.org

AI Score

Confidence

High

EPSS

0.003

Percentile

71.9%

JSON

A vulnerability exists in Schneider Electric’s Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.

CNA Affected

[
  {
    "product": "Modicon Quantum",
    "vendor": "Schneider Electric SE",
    "versions": [
      {
        "status": "affected",
        "version": "All versions of Modicon Quantum communication modules"
      }
    ]
  }
]