CVE-2018-7241
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - cybersecurity@se.com
- Published
- 2018-04-18
- Last modified
- 2024-08-05
- Weaknesses
- CWE-798
Affected products
- 140cpu31110 Firmware (Schneider-electric)
- 140cpu31110c Firmware (Schneider-electric)
- 140cpu43412u Firmware (Schneider-electric)
- 140cpu43412uc Firmware (Schneider-electric)
- 140cpu65150 Firmware (Schneider-electric)
- 140cpu65150c Firmware (Schneider-electric)
- 140cpu65160 Firmware (Schneider-electric)
- 140cpu65160c Firmware (Schneider-electric)
- 140cpu65160s Firmware (Schneider-electric)
- 140cpu65260 Firmware (Schneider-electric)
- 140cpu65260c Firmware (Schneider-electric)
- 140cpu65860 Firmware (Schneider-electric)
- 140cpu65860c Firmware (Schneider-electric)
- Bmxnor0200 Firmware (Schneider-electric)
- Bmxnor0200h Firmware (Schneider-electric)
- Modicon M340 Bmxp341000 Firmware (Schneider-electric)
- Modicon M340 Bmxp341000h Firmware (Schneider-electric)
- Modicon M340 Bmxp342000 Firmware (Schneider-electric)
- Modicon M340 Bmxp3420102 Firmware (Schneider-electric)
- Modicon M340 Bmxp3420102cl Firmware (Schneider-electric)
- Modicon M340 Bmxp342020 Firmware (Schneider-electric)
- Modicon M340 Bmxp342020h Firmware (Schneider-electric)
- Modicon M340 Bmxp3420302 Firmware (Schneider-electric)
- Modicon M340 Bmxp3420302cl Firmware (Schneider-electric)
- Modicon M340 Bmxp3420302h Firmware (Schneider-electric)
- Tsxh5724m Firmware (Schneider-electric)
- Tsxh5724mc Firmware (Schneider-electric)
- Tsxh5744m Firmware (Schneider-electric)
- Tsxh5744mc Firmware (Schneider-electric)
- Tsxp57104m Firmware (Schneider-electric)
- Tsxp57104mc Firmware (Schneider-electric)
- Tsxp57154m Firmware (Schneider-electric)
- Tsxp57154mc Firmware (Schneider-electric)
- Tsxp571634m Firmware (Schneider-electric)
- Tsxp571634mc Firmware (Schneider-electric)
- Tsxp57204m Firmware (Schneider-electric)
- Tsxp57204mc Firmware (Schneider-electric)
- Tsxp57254m Firmware (Schneider-electric)
- Tsxp57254mc Firmware (Schneider-electric)
- Tsxp572634m Firmware (Schneider-electric)
- Tsxp572634mc Firmware (Schneider-electric)
- Tsxp57304m Firmware (Schneider-electric)
- Tsxp57304mc Firmware (Schneider-electric)
- Tsxp57354m Firmware (Schneider-electric)
- Tsxp57354mc Firmware (Schneider-electric)
- Tsxp573634m Firmware (Schneider-electric)
- Tsxp573634mc Firmware (Schneider-electric)
- Tsxp57454m Firmware (Schneider-electric)
- Tsxp57454mc Firmware (Schneider-electric)
- Tsxp574634m Firmware (Schneider-electric)
- Tsxp574634mc Firmware (Schneider-electric)
- Tsxp57554m Firmware (Schneider-electric)
- Tsxp57554mc Firmware (Schneider-electric)
- Tsxp575634m Firmware (Schneider-electric)
- Tsxp575634mc Firmware (Schneider-electric)
- Tsxp576634m Firmware (Schneider-electric)
- Tsxp576634mc Firmware (Schneider-electric)
- Bmxnor0200 (Schneider Electric Se)
- Modicon M340 (Schneider Electric Se)
- Modicon Premium (Schneider Electric Se)
- Modicon Quantum (Schneider Electric Se)
References
- http://www.securityfocus.com/bid/103542
- https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01
- https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/
