Strix
26.1K

CVE-2013-0663

UnknownEPSS 5.96%

Last modified

CVE-2013-0663 is a vulnerability of currently unknown severity. Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote attackers to hijack the authentication of arbitrary users for requests that execute commands, as demonstrated by modifying HTTP credentials.. EPSS estimates a 5.96% chance of exploitation in the next 30 days.

Description

Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote attackers to hijack the authentication of arbitrary users for requests that execute commands, as demonstrated by modifying HTTP credentials.

Metrics

EPSS Probability
5.96%

92.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
Schneider-ElectricModicon Quantum Plc140noe77101
Schneider-ElectricModicon Quantum Plc140noe77111
Schneider-ElectricModicon Quantum Plc140nwm10000
Schneider-ElectricModicon M340bmxnoc0401
Schneider-ElectricModicon M340bmxnoe011xx
Schneider-ElectricModicon M340bmxnoe0100x
Schneider-ElectricModicon Premiumtsxety4103
Schneider-ElectricModicon Premiumtsxety5103
Schneider-ElectricModicon Premiumtsxwmy100

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2013-0663?
Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote attackers to hijack the authentication of arbitrary users for requests that execute commands, as demonstrated by modifying HTTP credentials.
How severe is CVE-2013-0663?
Severity scoring for CVE-2013-0663 is pending analysis. The EPSS model estimates a 5.96% probability of exploitation in the next 30 days.
How do I fix CVE-2013-0663?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-0663?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST