5
CVSSv2

CVE-2020-7549

Published: 11/12/2020 Updated: 10/04/2024
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause denial of HTTP and FTP services when a series of specially crafted requests is sent to the controller over HTTP.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

schneider-electric modicon_m340_bmxp341000_firmware

schneider-electric modicon_m340_bmxp342000_firmware

schneider-electric modicon_m340_bmxp3420102_firmware

schneider-electric modicon_m340_bmxp3420102cl_firmware

schneider-electric modicon_m340_bmxp342020_firmware

schneider-electric modicon_m340_bmxp3420302_firmware

schneider-electric modicon_m340_bmxp3420302cl_firmware

schneider-electric bmxnoe0100_firmware

schneider-electric bmxnoe0110_firmware

schneider-electric bmxnoc0401_firmware

schneider-electric 140noe77111_firmware

schneider-electric 140noc78100_firmware

schneider-electric 140noc78000_firmware

schneider-electric 140cpu65150_firmware

schneider-electric tsxety4103_firmware

schneider-electric tsxety5103_firmware

schneider-electric tsxp574634_firmware

schneider-electric tsxp575634_firmware

schneider-electric tsxp576634_firmware