CVE-2018-7242

Published: Apr 18, 2018Modified: Jun 17, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.

Affected (57)

57 products

140cpu43412u Firmware

140cpu65160 Firmware

140cpu65260 Firmware

140cpu65860 Firmware

140cpu65160s Firmware

140cpu65150c Firmware

140cpu31110c Firmware

140cpu43412uc Firmware

140cpu65160c Firmware

140cpu65260c Firmware

140cpu65860c Firmware

Modicon M340 Bmxp341000 Firmware

Modicon M340 Bmxp342000 Firmware

Modicon M340 Bmxp3420102 Firmware

Modicon M340 Bmxp3420102cl Firmware

Modicon M340 Bmxp342020 Firmware

Modicon M340 Bmxp3420302 Firmware

Modicon M340 Bmxp3420302cl Firmware

Modicon M340 Bmxp3420302h Firmware

Modicon M340 Bmxp342020h Firmware

Modicon M340 Bmxp341000h Firmware

Tsxp571634mc Firmware

Tsxp57204mc Firmware

Tsxp57254mc Firmware

Tsxp572634mc Firmware

Tsxp57304mc Firmware

Tsxp57354mc Firmware

Tsxp573634mc Firmware

Tsxp57454mc Firmware

Tsxp574634mc Firmware

Tsxp57554mc Firmware

Tsxp575634mc Firmware

Tsxp576634mc Firmware

Tsxh5724m Firmware

Tsxh5744mc Firmware

Tsxp57554m Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Bmxnor0200 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Bmxnor0200	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Bmxnor0200h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Bmxnor0200h	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 140cpu65150 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 140cpu65150	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 140cpu31110 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 140cpu31110	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 140cpu43412u Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 140cpu43412u	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 140cpu65160 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 140cpu65160	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 140cpu65260 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 140cpu65260	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 140cpu65860 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 140cpu65860	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 140cpu65160s Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 140cpu65160s	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 140cpu65150c Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 140cpu65150c	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 140cpu31110c Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 140cpu31110c	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 140cpu43412uc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 140cpu43412uc	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 140cpu65160c Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 140cpu65160c	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 140cpu65260c Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 140cpu65260c	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric 140cpu65860c Firmware	All versions

Running on/with	Platform Versions
Schneider Electric 140cpu65860c	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp341000 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp341000	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342000 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342000	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420102 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420102	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420102cl Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420102cl	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342020 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342020	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302 Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302cl Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302cl	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302h	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342020h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342020h	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp341000h Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp341000h	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxh5744m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxh5744m	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57104m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57104m	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57154m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57154m	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp571634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp571634m	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57204m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57204m	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57254m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57254m	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp572634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp572634m	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57304m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57304m	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57354m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57354m	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp573634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp573634m	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57454m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57454m	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp574634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp574634m	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp575634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp575634m	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp576634m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp576634m	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxh5724mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxh5724mc	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57104mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57104mc	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57154mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57154mc	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp571634mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp571634mc	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57204mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57204mc	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57254mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57254mc	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp572634mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp572634mc	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57304mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57304mc	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57354mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57354mc	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp573634mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp573634mc	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57454mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57454mc	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp574634mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp574634mc	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57554mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57554mc	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp575634mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp575634mc	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp576634mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp576634mc	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxh5724m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxh5724m	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxh5744mc Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxh5744mc	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Tsxp57554m Firmware	All versions

Running on/with	Platform Versions
Schneider Electric Tsxp57554m	All versions

Related CWEs

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (6)

http://www.securityfocus.com/bid/103543

Source: cybersecurity@se.com

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01

Source: cybersecurity@se.com

Third Party AdvisoryUS Government Resource

https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/

Source: cybersecurity@se.com

Vendor Advisory

http://www.securityfocus.com/bid/103543

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.