CVE-2018-7830

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a denial of service can occur for ~1 minute by sending a specially crafted HTTP request.

• CWE-113

• https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/Vendor Advisory
• https://www.tenable.com/security/research/tra-2018-38Exploit, Third Party Advisory
• https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/Vendor Advisory
• https://www.tenable.com/security/research/tra-2018-38Exploit, Third Party Advisory

Published

Nov 30, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7824An Externally Controlled Reference to a Resource (CWE-610) v…4.9
• CVE-2018-7825A Command Injection vulnerability exists in the web-based GU…
• CVE-2018-7826A Command Injection vulnerability exists in the web-based GU…
• CVE-2018-7827A Cross-Site Scripting (XSS) vulnerability exists in the 1st…
• CVE-2018-7828A Cross-Site Request Forgery (CSRF) vulnerability exists in …
• CVE-2018-7829An Improper Neutralization of Special Elements in Query vuln…
• CVE-2018-7831An Improper Neutralization of Script-Related HTML Tags in a …
• CVE-2018-7832An Improper Input Validation vulnerability exists in Pro-Fac…
• CVE-2018-7833An Improper Check for Unusual or Exceptional Conditions vuln…
• CVE-2018-7834A CWE-79 Cross-Site Scripting vulnerability exists in all ve…
• CVE-2018-7835An Improper Limitation of a Pathname to a Restricted Directo…
• CVE-2018-7836An unrestricted Upload of File with Dangerous Type vulnerabi…