Strix
26.1K

CVE-2020-7540

CRITICALCVSS 9.8/10EPSS 2.14%

Last modified

CVE-2020-7540 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.. EPSS estimates a 2.14% chance of exploitation in the next 30 days.

Description

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.

Metrics

CVSS 3.1
9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
2.14%

79.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
Schneider-ElectricModicon M340 Bmxp341000 Firmware< 3.30
Schneider-ElectricModicon M340 Bmxp342000 Firmware< 3.30
Schneider-ElectricModicon M340 Bmxp3420102 Firmware< 3.30
Schneider-ElectricModicon M340 Bmxp3420102cl Firmware< 3.30
Schneider-ElectricModicon M340 Bmxp342020 Firmware< 3.30
Schneider-ElectricModicon M340 Bmxp3420302 Firmware< 3.30
Schneider-ElectricModicon M340 Bmxp3420302cl Firmware< 3.30
Schneider-ElectricBmxnoe0100 Firmware< 3.3
Schneider-ElectricBmxnoe0110 Firmware< 6.5
Schneider-Electric140noe77101 Firmware< 7.1
Schneider-Electric140noe77111 Firmware< 7.1
Schneider-Electric140cpu65150 Firmware< 6.1
Schneider-Electric140cpu65160 Firmware< 6.1
Schneider-Electric140noc78000 Firmware< 1.74
Schneider-Electric140noc78100 Firmware< 1.74
Schneider-Electric140noc77101 Firmware< 1.08
Schneider-ElectricTsxp574634 Firmware< 6.1
Schneider-ElectricTsxp575634 Firmware< 6.1
Schneider-ElectricTsxp576634 Firmware< 6.1
Schneider-ElectricTsxety4103 Firmware< 6.2
Schneider-ElectricTsxety5103 Firmware< 6.4
Schneider-ElectricBmxnoc0401 Firmware< 2.10
Schneider-ElectricBmxnor200h FirmwareAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2020-7540?
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.
How severe is CVE-2020-7540?
CVE-2020-7540 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 2.14% probability of exploitation in the next 30 days.
How do I fix CVE-2020-7540?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-7540?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST