CVE-2011-4861

The modbus_125_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) allows remote attackers to install arbitrary firmware updates via a MODBUS 125 function code to TCP port 502.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2011-12-17

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Quantum Ethernet Module 140noe77100 (Schneider-electric)
• Quantum Ethernet Module 140noe77101 (Schneider-electric)
• Quantum Ethernet Module 140noe77111 (Schneider-electric)

References

• http://reversemode.com/index.php?option=com_content&task=view&id=80&Itemid=1