critical10.0
CVE-2014-0754
Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140…
Impact
Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Stbnic2212 Firmware | All versions |
| Schneider-Electric | Stbnip2212 Firmware | All versions |
| Schneider-Electric | Tsxetc0101 Firmware | All versions |
| Schneider-Electric | Tsxetc100 Firmware | All versions |
| Schneider-Electric | Tsxp573623mc Firmware | All versions |
| Schneider-Electric | Tsxety110ws Firmware | All versions |
| Schneider-Electric | Tsxp574634m Firmware | All versions |
| Schneider-Electric | Tsxety110wsc Firmware | All versions |
| Schneider-Electric | Tsxp574823am Firmware | All versions |
| Schneider-Electric | Tsxety4103 Firmware | All versions |
| Schneider-Electric | Tsxp574823m Firmware | All versions |
| Schneider-Electric | Tsxety4103c Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/70193
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2014-260-01
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-273-01
- http://download.schneider-electric.com/files?p_Reference=SEVD-2014-260-01&p_EnDocType=Software%20-%20Updates&p_File_Id=608959359&p_File_Name=SEVD-2014-260-01.pdf
- http://www.securityfocus.com/bid/70193
- https://ics-cert.us-cert.gov/advisories/ICSA-14-273-01