PT-2018-1294 · Schneider Electric · Modicon M340+3

Aleksey Stennikov + 3 · Publicado 2018-03-22 · Atualizado 2024-04-10 · CVE-2018-7241

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers (affected versions not specified)

Description The issue is related to hard-coded accounts in the communication modules of the affected controllers. This concern is also associated with the FTP server vulnerability in the programmable logic controllers' firmware, which involves the use of pre-set credentials. Exploitation of this issue could allow a remote attacker to gain access to the device.

Recommendations For all affected versions, consider disabling or restricting access to the FTP server and communication modules until a fix is available. As a temporary workaround, restrict access to the devices to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

BDU:2018-00790

CVE-2018-7241

Produtos afetados

Bmxnor0200

Modicon M340

Modicon Premium

Modicon Quantum

Referências · 6

• https://schneider-electric.com/en/download/document/SEVD-2018-081-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7241 · Nota de Segurança
• https://bdu.fstec.ru/vul/2018-00790 · Nota de Segurança
• http://securityfocus.com/bid/103542 · Nota
• https://securitylab.ru/news/492333.php · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01 · Nota