CVE-2020-7562
A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.90%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.
- CVSS 3.1
- 8.1 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
- EPSS
- 0.90% probability · 58th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-125
- Affected
- schneider-electric/modicon tsxety4103 firmware · schneider-electric/modicon tsxety5103 firmware · schneider-electric/modicon tsxp574634 firmware · schneider-electric/modicon tsxp575634 firmware · schneider-electric/modicon tsxp576634 firmware · schneider-electric/modicon quantum 140noe77101 firmware · schneider-electric/modicon quantum 140noe77111 firmware · schneider-electric/modicon quantum 140noc78100 firmware · schneider-electric/modicon quantum 140cpu65150 firmware · schneider-electric/modicon quantum 140cpu65150c firmware · schneider-electric/modicon quantum 140cpu65160c firmware · schneider-electric/modicon quantum 140cpu65160 firmware · schneider-electric/modicon m340 bmx p34-2010 firmware · schneider-electric/modicon m340 bmx p34-2030 firmware · schneider-electric/modicon m340 bmx noc 0401 firmware · schneider-electric/modicon m340 bmx noe 0100 firmware · schneider-electric/modicon m340 bmx noe 0100h firmware · schneider-electric/modicon m340 bmx noe 0110 firmware · schneider-electric/modicon m340 bmx noe 0110h firmware · schneider-electric/modicon m340 bmx nor 0200h firmware
- Source
- cybersecurity@se.com
References
- https://www.se.com/ww/en/download/document/SEVD-2020-315-01/Vendor Advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-01/Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.