PT-2020-6830 · Schneider Electric · Modicon M340+2

Published 2020-08-03 · Updated 2026-05-29 · CVE-2020-7562

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions Modicon M340 (affected versions not specified) Modicon Quantum (affected versions not specified) Modicon Premium Legacy (affected versions not specified)

Description A CWE-125: Out-of-Bounds Read issue exists in the Web Server of the affected devices, which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file over FTP. This could allow a remote attacker to disclose protected information or cause a denial of service.

Recommendations For Modicon M340, consider disabling the FTP upload feature until a patch is available. For Modicon Quantum, restrict access to the Web Server to minimize the risk of exploitation. For Modicon Premium Legacy, avoid using the Web Server to upload files until the issue is resolved. As a temporary workaround, consider disabling the Web Server on the affected devices until a patch is available.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2023-00110

CVE-2020-7562

Affected Products

Modicon M340

Modicon Premium Legacy

Modicon Quantum

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2020-7562 · Security Note
• https://se.com/ww/en/download/document/SEVD-2020-315-01 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00110 · Security Note
• https://t.me/cibsecurity/16508 · Telegram Post
• https://t.me/cveNotify/165193 · Telegram Post
• https://t.me/cvenotify/5760 · Telegram Post
• https://fortiguard.com/zeroday/FG-VD-20-105 · Note
• https://t.me/cvenotify/6481 · Telegram Post
• https://t.me/cibsecurity/17380 · Telegram Post