PT-2020-19604 · Schneider Electric · Premium Processors With Integrated Ethernet+2

Published 2020-03-23 · Updated 2026-05-28 · CVE-2020-7477

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Quantum Ethernet Network module 140NOE771x1 versions 7.0 and prior Quantum processors with integrated Ethernet – 140CPU65xxxxx all versions Premium processors with integrated Ethernet all versions

Description A vulnerability exists due to improper check for unusual or exceptional conditions, which could cause a Denial of Service when sending a specially crafted command over Modbus.

Recommendations For Quantum Ethernet Network module 140NOE771x1 versions 7.0 and prior, update to a version later than 7.0 to resolve the issue. For Quantum processors with integrated Ethernet – 140CPU65xxxxx, restrict access to Modbus to minimize the risk of exploitation until a patch is available. For Premium processors with integrated Ethernet, consider disabling Modbus functionality as a temporary workaround until a fix is provided.

Fix

DoS

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2020-7477

Affected Products

Premium Processors With Integrated Ethernet

Quantum Ethernet Network Module 140Noe771X1

Quantum Processors With Integrated Ethernet

References · 5

• https://osv.dev/vulnerability/CVE-2020-7477 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7477 · Security Note
• https://se.com/ww/en/download/document/SEVD-2020-070-02 · Vendor Advisory
• https://t.me/cvenotify/2039 · Telegram Post
• https://t.me/cveNotify/165102 · Telegram Post