NetSight
IP …
critical9.8

CVE-2020-7533

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending speciall…

Impact

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests.

Affected products

VendorProductAffected versions
Schneider-ElectricModicon M340 Bmxp3420302 Firmware
before 3.20
Schneider-ElectricModicon M340 Bmxp342000 Firmware
before 3.20
Schneider-ElectricModicon M340 Bmxp341000 Firmware
before 3.20
Schneider-ElectricModicon M340 Bmxp3420102 Firmware
before 3.20
Schneider-ElectricBmxnoe0100 Firmware
before 3.3
Schneider-ElectricBmxnoe0110 Firmware
before 6.5
Schneider-ElectricBmxnoc0401 Firmware
before 2.10
Schneider-ElectricTsxp574634 Firmware
before 6.1
Schneider-ElectricTsxp575634 Firmware
before 6.1
Schneider-ElectricTsxp576634 Firmware
before 6.1
Schneider-ElectricTsxety4103 Firmware
before 6.2
Schneider-ElectricTsxety5103 Firmware
before 6.4

Weakness classification

CWE-287

References