CVE-2014-0754

Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.

• CWE-22

• http://www.securityfocus.com/bid/70193Third Party Advisory, VDB Entry
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2014-260-01
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-273-01
• http://download.schneider-electric.com/files?p_Reference=SEVD-2014-260-01&p_EnDocType=Software%20-%20Updates&p_File_Id=608959359&p_File_Name=SEVD-2014-260-01.pdfPatch, Vendor Advisory
• http://www.securityfocus.com/bid/70193Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-14-273-01Third Party Advisory, US Government Resource

Published

Oct 3, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0748apinit on Cray devices with CLE before 4.2.UP02 and 5.x befo…
• CVE-2014-0749Stack-based buffer overflow in lib/Libdis/disrsi_.c in Teras…
• CVE-2014-0750Directory traversal vulnerability in gefebt.exe in the WebVi…
• CVE-2014-0751The CIMPLICITY Web-based access component, CimWebServer, doe…
• CVE-2014-0752The SCADA server in Ecava IntegraXor before 4.1.4369 allows …
• CVE-2014-0753Stack-based buffer overflow in the SCADA server in Ecava Int…
• CVE-2014-0755Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, …
• CVE-2014-0756Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-0757Smart Software Solutions (3S) CoDeSys Runtime Toolkit before…
• CVE-2014-0758An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0…
• CVE-2014-0759Unquoted Windows search path vulnerability in Schneider Elec…5.9
• CVE-2014-0760The Festo CECX-X-C1 Modular Master Controller with CoDeSys a…