SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2015-7937

Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data.

HIGH 10.0EPSS 7.35%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (7.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data.

CVSS 2.0
10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
7.35% probability · 94th percentile
CISA KEV
Not listed
Weakness
CWE-119
Affected
schneider-electric/bmxnoc0401 · schneider-electric/bmxnoe0100 · schneider-electric/bmxnoe0100h · schneider-electric/bmxnoe0110 · schneider-electric/bmxnoe0110h · schneider-electric/bmxnor0200 · schneider-electric/bmxnor0200h · schneider-electric/bmxpra0100 · schneider-electric/modicon m340 bmxp342020 · schneider-electric/modicon m340 bmxp342020h · schneider-electric/modicon m340 bmxp342030 · schneider-electric/modicon m340 bmxp3420302 · schneider-electric/modicon m340 bmxp3420302h
Source
ics-cert@hq.dhs.gov

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.