critical9.8
CVE-2018-7761
A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbi…
Impact
A vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Bmxnor0200 Firmware | All versions |
| Schneider-Electric | Bmxnor0200h Firmware | All versions |
| Schneider-Electric | 140cpu65150 Firmware | All versions |
| Schneider-Electric | 140cpu31110 Firmware | All versions |
| Schneider-Electric | 140cpu43412u Firmware | All versions |
| Schneider-Electric | 140cpu65160 Firmware | All versions |
| Schneider-Electric | 140cpu65260 Firmware | All versions |
| Schneider-Electric | 140cpu65860 Firmware | All versions |
| Schneider-Electric | 140cpu65160s Firmware | All versions |
| Schneider-Electric | 140cpu65150c Firmware | All versions |
| Schneider-Electric | 140cpu31110c Firmware | All versions |
| Schneider-Electric | 140cpu43412uc Firmware | All versions |