{"id":"CVE-2014-0754","url":"https://www.cyber-defence.io/tools/cve/CVE-2014-0754","generatedAt":"2026-10-27T22:05:36.476Z","title":"Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before…","description":"Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.","published":"2014-10-03T18:55:06.000Z","lastModified":"2026-06-17T00:03:35.000Z","status":"Modified","sourceIdentifier":"ics-cert@hq.dhs.gov","cvss":{"version":"2.0","score":10,"severity":"HIGH","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C"},"cwe":["CWE-22"],"affected":["schneider-electric/stbnic2212 firmware","schneider-electric/stbnip2212 firmware","schneider-electric/tsxetc0101 firmware","schneider-electric/tsxetc100 firmware","schneider-electric/tsxp573623mc firmware","schneider-electric/tsxety110ws firmware","schneider-electric/tsxp574634m firmware","schneider-electric/tsxety110wsc firmware","schneider-electric/tsxp574823am firmware","schneider-electric/tsxety4103 firmware","schneider-electric/tsxp574823m firmware","schneider-electric/tsxety4103c firmware","schneider-electric/tsxp574823mc firmware","schneider-electric/tsxety5103 firmware","schneider-electric/tsxp575634m firmware","schneider-electric/tsxety5103c firmware","schneider-electric/tsxp576634m firmware","schneider-electric/tsxetz410 firmware","schneider-electric/tsxwmy100 firmware","schneider-electric/tsxetz510 firmware","schneider-electric/tsxwmy100c firmware","schneider-electric/tsxntp100 firmware","schneider-electric/modicon m580 bmxnoc0402 firmware","schneider-electric/modicon m340 bmxnoe0100 firmware","schneider-electric/modicon m340 bmxnoe0110 firmware","schneider-electric/modicon m340 bmxnoe0110h firmware","schneider-electric/modicon m340 bmxnor0200h firmware","schneider-electric/modicon m340 bmxp342020 firmware","schneider-electric/modicon m340 bmxp342020h firmware","schneider-electric/modicon m340 bmxp342030 firmware","schneider-electric/modicon m340 bmxp3420302 firmware","schneider-electric/modicon m340 bmxp3420302h firmware","schneider-electric/modicon m340 bmxp342030h firmware","schneider-electric/modicon m340 bmxnoc0401 firmware","schneider-electric/171ccc96020 firmware","schneider-electric/171ccc96020c firmware","schneider-electric/171ccc96030 firmware","schneider-electric/171ccc96030c firmware","schneider-electric/171ccc98020 firmware","schneider-electric/171ccc98030 firmware","schneider-electric/tsxp571634m firmware","schneider-electric/tsxp572634m firmware","schneider-electric/tsxp573634m firmware"],"epss":{"score":0.09513,"percentile":0.95414,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (9.51%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/70193","tags":["Third Party Advisory","VDB Entry"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2014-260-01","source":"ics-cert@hq.dhs.gov"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-14-273-01","source":"ics-cert@hq.dhs.gov"},{"url":"http://download.schneider-electric.com/files?p_Reference=SEVD-2014-260-01&p_EnDocType=Software%20-%20Updates&p_File_Id=608959359&p_File_Name=SEVD-2014-260-01.pdf","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/70193","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-14-273-01","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-0754","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}