CVE-2018-7761

2018-04-1820:00:00

schneider

www.cve.org

AI Score

9.8

Confidence

High

EPSS

0.005

Percentile

76.0%

JSON

A vulnerability exists in the HTTP request parser in Schneider Electric’s Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.

CNA Affected

[
  {
    "product": "Modicon M340, Modicon Premium, Modicon Quantum, BMXNOR0202",
    "vendor": "Schneider Electric SE",
    "versions": [
      {
        "status": "affected",
        "version": "All Modicon M340, Premium, Quantum PLCs and BMXNOR0202"
      }
    ]
  }
]

References

www.schneider-electric.com/en/download/document/SEVD-2018-081-02/