PT-2017-3703 · Schneider Electric · Modicon Premium+3

Aleksandr Melkikh + 2 · Published 2017-04-28 · Updated 2024-04-10 · CVE-2018-7761

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon BMXNOR0200 (affected versions not specified) Schneider Electric Modicon M340 (affected versions not specified) Schneider Electric Modicon Premium (affected versions not specified) Schneider Electric Modicon Quantum PLC (affected versions not specified)

Description: The issue is related to an error in parsing HTTP requests in the embedded web server of the affected devices. This could allow a remote attacker to execute arbitrary code on the web server using specially crafted HTTP requests.

Recommendations: For Schneider Electric Modicon BMXNOR0200, consider disabling the HTTP request parser until a patch is available. For Schneider Electric Modicon M340, restrict access to the web server to minimize the risk of exploitation. For Schneider Electric Modicon Premium, avoid using the web server for critical operations until the issue is resolved. For Schneider Electric Modicon Quantum PLC, limit network exposure of the device to reduce the risk of remote exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2018-01065

CVE-2018-7761

Affected Products

Modicon Bmxnor0200

Modicon M340

Modicon Premium

Modicon Quantum Plc

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-7761 · Security Note
• https://bdu.fstec.ru/vul/2018-01065 · Security Note
• https://schneider-electric.com/en/download/document/SEVD-2018-081-02 · Vendor Advisory
• https://anti-malware.ru/news/2018-08-22-1447/27217 · Note