ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-7241

—
CVSS 3.0
9.8 critical
EPSS
4%p89
Published
()
Modified
Description

Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.

Vendors
schneider-electric
Products
bmxnor0200 firmware, bmxnor0200h firmware, 140cpu65150 firmware, 140cpu31110 firmware, 140cpu43412u firmware, 140cpu65160 firmware, 140cpu65260 firmware, 140cpu65860 firmware, 140cpu65160s firmware, 140cpu65150c firmware, 140cpu31110c firmware, 140cpu43412uc firmware
Weakness
CWE-798
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (3.8%)

In the news

No ingested article mentions this CVE yet.