ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-7761

—
CVSS 3.0
9.8 critical
EPSS
2%p81
Published
()
Modified
Description

A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.

Vendors
schneider-electric
Products
bmxnor0200 firmware, bmxnor0200h firmware, 140cpu65150 firmware, 140cpu31110 firmware, 140cpu43412u firmware, 140cpu65160 firmware, 140cpu65260 firmware, 140cpu65860 firmware, 140cpu65160s firmware, 140cpu65150c firmware, 140cpu31110c firmware, 140cpu43412uc firmware
Weakness
CWE-20
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news

No ingested article mentions this CVE yet.