CVE-2020-7562
A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.
- Score
- CVSS 3.1 8.1 High
- Status
- Modified - cybersecurity@se.com
- Published
- 2020-11-18
- Last modified
- 2026-05-29
- Weaknesses
- CWE-125
Affected products
- Modicon M340 Bmx Noc 0401 Firmware (Schneider-electric)
- Modicon M340 Bmx Noe 0100 Firmware (Schneider-electric)
- Modicon M340 Bmx Noe 0100h Firmware (Schneider-electric)
- Modicon M340 Bmx Noe 0110 Firmware (Schneider-electric)
- Modicon M340 Bmx Noe 0110h Firmware (Schneider-electric)
- Modicon M340 Bmx Nor 0200h Firmware (Schneider-electric)
- Modicon M340 Bmx P34-2010 Firmware (Schneider-electric)
- Modicon M340 Bmx P34-2030 Firmware (Schneider-electric)
- Modicon Quantum 140cpu65150 Firmware (Schneider-electric)
- Modicon Quantum 140cpu65150c Firmware (Schneider-electric)
- Modicon Quantum 140cpu65160 Firmware (Schneider-electric)
- Modicon Quantum 140cpu65160c Firmware (Schneider-electric)
- Modicon Quantum 140noc78100 Firmware (Schneider-electric)
- Modicon Quantum 140noe77101 Firmware (Schneider-electric)
- Modicon Quantum 140noe77111 Firmware (Schneider-electric)
- Modicon Tsxety4103 Firmware (Schneider-electric)
- Modicon Tsxety5103 Firmware (Schneider-electric)
- Modicon Tsxp574634 Firmware (Schneider-electric)
- Modicon Tsxp575634 Firmware (Schneider-electric)
- Modicon Tsxp576634 Firmware (Schneider-electric)
References
- https://www.se.com/ww/en/download/document/SEVD-2020-315-01/
