Lucene search

K
nessusThis script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500276.NASL
HistoryNov 08, 2019 - 12:00 a.m.

Schneider-electric Modicom Weak Password Recovery Mechanism for Forgotten Password

2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
10

0.01 Low

EPSS

Percentile

83.3%

An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the change password function of the web server

File data ot_500276.nasl
VendorProductVersionCPE
schneider-electricmodicom_m340_firmware*cpe:2.3:o:schneider-electric:modicom_m340_firmware:*:*:*:*:*:*:*:*
schneider-electricmodicom_m340-cpe:2.3:h:schneider-electric:modicom_m340:-:*:*:*:*:*:*:*
schneider-electricmodicom_premium_firmware*cpe:2.3:o:schneider-electric:modicom_premium_firmware:*:*:*:*:*:*:*:*
schneider-electricmodicom_premium*cpe:2.3:h:schneider-electric:modicom_premium:*:*:*:*:*:*:*:*
schneider-electricmodicom_quantum_firmware*cpe:2.3:o:schneider-electric:modicom_quantum_firmware:*:*:*:*:*:*:*:*
schneider-electricmodicom_quantum*cpe:2.3:h:schneider-electric:modicom_quantum:*:*:*:*:*:*:*:*
schneider-electricmodicom_bmxnor0200h_firmware*cpe:2.3:o:schneider-electric:modicom_bmxnor0200h_firmware:*:*:*:*:*:*:*:*
schneider-electricmodicom_bmxnor0200h-cpe:2.3:h:schneider-electric:modicom_bmxnor0200h:-:*:*:*:*:*:*:*

0.01 Low

EPSS

Percentile

83.3%