CVE-2018-7810

🗓️ 30 Nov 2018 19:00:00Reported by schneiderType

An XSS vulnerability in Modicon M340, Premium, Quantum PLCs & BMXNOR020

Reporter	Title	Published	Views	Family All 13
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2018-1770), (CVE-2018-7810), (CVE-2018-1793), (CVE-2018-1794), (CVE-2018-1777)	21 Oct 201819:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Websphere Vulnerabilities Impact IBM Control Center (CVE-2018-3169, CVE-2014-7810, CVE-2018-1767)	24 Jul 202022:19	–	ibm
Tenable Nessus	Schneider Electric Modicon Multiple Controllers Cross-Site Scripting	8 May 201900:00	–	nessus
Tenable Nessus	Schneider-electric Modicom Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	8 Nov 201900:00	–	nessus
Tenable Nessus	Modicon Quantum HTTP Server 'formTest' 'name' Parameter XSS	26 Nov 201800:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Cross-site Scripting (CVE-2018-7810)	7 Feb 202200:00	–	nessus
BDU FSTEC	The vulnerability of microprogrammed logic controllers from Schneider Electric Modicon, related to insufficient protection of the web page structure, allows attackers to inject JavaScript that will be executed in the user’s browser.	18 Jan 201900:00	–	bdu_fstec
CNVD	Cross-site scripting vulnerability in multiple Schneider Electric products (CNVD-2018-25428)	29 Nov 201800:00	–	cnvd
Check Point Advisories	Schneider Electric Modicon Multiple Authentication Bypass Vulnerabilities (CVE-2018-7809; CVE-2018-7810; CVE-2018-7811)	24 Jul 201900:00	–	checkpoint_advisories
CVE	CVE-2018-7810	30 Nov 201819:00	–	cve

[
  {
    "product": "Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200",
    "vendor": "Schneider Electric SE",
    "versions": [
      {
        "status": "affected",
        "version": "Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2018-38
schneider-electric	www.schneider-electric.com/en/download/document/SEVD-2018-327-01/

01 Dec 2018 10:57Current

6.1Medium risk

Vulners AI Score6.1

EPSS0.00896