CVE-2014-0754

Published: Oct 3, 2014Modified: May 6, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.

Affected (43)

43 products

Modicon M340 Bmxnoe0100 Firmware

171ccc96020 Firmware

171ccc96020c Firmware

171ccc96030 Firmware

171ccc96030c Firmware

171ccc98020 Firmware

171ccc98030 Firmware

Modicon M340 Bmxnoc0401 Firmware

Modicon M580 Bmxnoc0402 Firmware

Modicon M340 Bmxnoe0110 Firmware

Modicon M340 Bmxnoe0110h Firmware

Modicon M340 Bmxnor0200h Firmware

Modicon M340 Bmxp342020 Firmware

Modicon M340 Bmxp342020h Firmware

Modicon M340 Bmxp3420302 Firmware

Modicon M340 Bmxp342030 Firmware

Modicon M340 Bmxp3420302h Firmware

Modicon M340 Bmxp342030h Firmware

Tsxetc100 Firmware

Tsxp573623mc Firmware

Tsxety110ws Firmware

Tsxp574634m Firmware

Tsxety110wsc Firmware

Tsxp574823am Firmware

Tsxety4103 Firmware

Tsxp574823m Firmware

Tsxety4103c Firmware

Tsxp574823mc Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Stbnic2212 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Stbnic2212	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Stbnip2212 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Stbnip2212	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxetc0101 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxetc0101	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxnoe0100 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxnoe0100	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 171ccc96020 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 171ccc96020	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 171ccc96020c Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 171ccc96020c	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 171ccc96030 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 171ccc96030	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 171ccc96030c Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 171ccc96030c	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 171ccc98020 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 171ccc98020	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 171ccc98030 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 171ccc98030	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxnoc0401 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxnoc0401	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M580 Bmxnoc0402 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M580 Bmxnoc0402	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxnoe0110 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxnoe0110	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxnoe0110h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxnoe0110h	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxnor0200h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxnor0200h	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342020 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342020	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342020h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342020h	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342030 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342030	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302h	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342030h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342030h	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxetc100 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxetc100	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp573623mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp573623mc	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxety110ws Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxety110ws	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp574634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp574634m	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxety110wsc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxety110wsc	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp574823am Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp574823am	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxety4103 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxety4103	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp574823m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp574823m	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxety4103c Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxety4103c	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp574823mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp574823mc	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxety5103 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxety5103	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp575634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp575634m	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxety5103c Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxety5103c	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp576634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp576634m	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxetz410 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxetz410	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxwmy100 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxwmy100	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxetz510 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxetz510	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxwmy100c Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxwmy100c	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxntp100 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxntp100	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp571634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp571634m	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp572634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp572634m	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp573634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp573634m	All versions

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (6)

http://www.securityfocus.com/bid/70193

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2014-260-01

Source: ics-cert@hq.dhs.gov

https://www.cisa.gov/news-events/ics-advisories/icsa-14-273-01

Source: ics-cert@hq.dhs.gov

http://download.schneider-electric.com/files?p_Reference=SEVD-2014-260-01&p_EnDocType=Software%20-%20Updates&p_File_Id=608959359&p_File_Name=SEVD-2014-260-01.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/70193

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-14-273-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.