Lucene search

PRIOn knowledge basePRION:CVE-2020-7539

HistoryDec 11, 2020 - 1:15 a.m.

Design/Logic Flaw

2020-12-1101:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

42.5%

JSON

A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause a denial of service vulnerability when a specially crafted packet is sent to the controller over HTTP.

CPENameOperatorVersion
140cpu65150_firmwarelt6.1
140noc77101_firmwarelt1.08
140noc78000_firmwarelt1.74
140noc78100_firmwarelt1.74
140noe77111_firmwarelt7.1
bmxnoc0401_firmwarelt2.10
bmxnoe0100_firmwarelt3.3
bmxnoe0110_firmwarelt6.5
bmxp341000_firmwarelt3.30
bmxp342000_firmwarelt3.30

Name	Operator	Version
140cpu65150_firmware	lt	6.1
140noc77101_firmware	lt	1.08
140noc78000_firmware	lt	1.74
140noc78100_firmware	lt	1.74
140noe77111_firmware	lt	7.1
bmxnoc0401_firmware	lt	2.10
bmxnoe0100_firmware	lt	3.3
bmxnoe0110_firmware	lt	6.5
bmxp341000_firmware	lt	3.30
bmxp342000_firmware	lt	3.30

Rows per page:

1-10 of 201

References

www.se.com/ww/en/download/document/SEVD-2020-343-03/

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

42.5%

JSON

Related for PRION:CVE-2020-7539