← Back

CVE-2018-7760

nvd nist
Published: Apr 18, 2018Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization.

Affected (57)

Products: Schneider Electric: Bmxnor0200 Firmware, Bmxnor0200h Firmware, 140cpu65150 Firmware, 140cpu31110 Firmware, 140cpu43412u Firmware, 140cpu65160 Firmware, 140cpu65260 Firmware, 140cpu65860 Firmware, 140cpu65160s Firmware, 140cpu65150c Firmware, 140cpu31110c Firmware, 140cpu43412uc Firmware, 140cpu65160c Firmware, 140cpu65260c Firmware, 140cpu65860c Firmware, Modicon M340 Bmxp341000 Firmware, Modicon M340 Bmxp342000 Firmware, Modicon M340 Bmxp3420102 Firmware, Modicon M340 Bmxp3420102cl Firmware, Modicon M340 Bmxp342020 Firmware, Modicon M340 Bmxp3420302 Firmware, Modicon M340 Bmxp3420302cl Firmware, Modicon M340 Bmxp3420302h Firmware, Modicon M340 Bmxp342020h Firmware, Modicon M340 Bmxp341000h Firmware, Tsxh5744m Firmware, Tsxp57104m Firmware, Tsxp57154m Firmware, Tsxp571634m Firmware, Tsxp57204m Firmware, Tsxp57254m Firmware, Tsxp572634m Firmware, Tsxp57304m Firmware, Tsxp57354m Firmware, Tsxp573634m Firmware, Tsxp57454m Firmware, Tsxp574634m Firmware, Tsxp575634m Firmware, Tsxp576634m Firmware, Tsxh5724mc Firmware, Tsxp57104mc Firmware, Tsxp57154mc Firmware, Tsxp571634mc Firmware, Tsxp57204mc Firmware, Tsxp57254mc Firmware, Tsxp572634mc Firmware, Tsxp57304mc Firmware, Tsxp57354mc Firmware, Tsxp573634mc Firmware, Tsxp57454mc Firmware, Tsxp574634mc Firmware, Tsxp57554mc Firmware, Tsxp575634mc Firmware, Tsxp576634mc Firmware, Tsxh5724m Firmware, Tsxh5744mc Firmware, Tsxp57554m Firmware
Schneider Electric
57 products
Bmxnor0200 Firmware
Bmxnor0200h Firmware
140cpu65150 Firmware
140cpu31110 Firmware
140cpu43412u Firmware
140cpu65160 Firmware
140cpu65260 Firmware
140cpu65860 Firmware
140cpu65160s Firmware
140cpu65150c Firmware
140cpu31110c Firmware
140cpu43412uc Firmware
140cpu65160c Firmware
140cpu65260c Firmware
140cpu65860c Firmware
Modicon M340 Bmxp341000 Firmware
Modicon M340 Bmxp342000 Firmware
Modicon M340 Bmxp3420102 Firmware
Modicon M340 Bmxp3420102cl Firmware
Modicon M340 Bmxp342020 Firmware
Modicon M340 Bmxp3420302 Firmware
Modicon M340 Bmxp3420302cl Firmware
Modicon M340 Bmxp3420302h Firmware
Modicon M340 Bmxp342020h Firmware
Modicon M340 Bmxp341000h Firmware
Tsxh5744m Firmware
Tsxp57104m Firmware
Tsxp57154m Firmware
Tsxp571634m Firmware
Tsxp57204m Firmware
Tsxp57254m Firmware
Tsxp572634m Firmware
Tsxp57304m Firmware
Tsxp57354m Firmware
Tsxp573634m Firmware
Tsxp57454m Firmware
Tsxp574634m Firmware
Tsxp575634m Firmware
Tsxp576634m Firmware
Tsxh5724mc Firmware
Tsxp57104mc Firmware
Tsxp57154mc Firmware
Tsxp571634mc Firmware
Tsxp57204mc Firmware
Tsxp57254mc Firmware
Tsxp572634mc Firmware
Tsxp57304mc Firmware
Tsxp57354mc Firmware
Tsxp573634mc Firmware
Tsxp57454mc Firmware
Tsxp574634mc Firmware
Tsxp57554mc Firmware
Tsxp575634mc Firmware
Tsxp576634mc Firmware
Tsxh5724m Firmware
Tsxh5744mc Firmware
Tsxp57554m Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bmxnor0200 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Bmxnor0200
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bmxnor0200h Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Bmxnor0200h
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
140cpu65150 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
140cpu65150
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
140cpu31110 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
140cpu31110
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
140cpu43412u Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
140cpu43412u
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
140cpu65160 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
140cpu65160
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
140cpu65260 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
140cpu65260
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
140cpu65860 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
140cpu65860
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
140cpu65160s Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
140cpu65160s
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
140cpu65150c Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
140cpu65150c
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
140cpu31110c Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
140cpu31110c
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
140cpu43412uc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
140cpu43412uc
All versions
Configuration N
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
140cpu65160c Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
140cpu65160c
All versions
Configuration O
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
140cpu65260c Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
140cpu65260c
All versions
Configuration P
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
140cpu65860c Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
140cpu65860c
All versions
Configuration Q
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M340 Bmxp341000 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M340 Bmxp341000
All versions
Configuration R
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M340 Bmxp342000 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M340 Bmxp342000
All versions
Configuration S
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M340 Bmxp3420102 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M340 Bmxp3420102
All versions
Configuration T
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M340 Bmxp3420102cl Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M340 Bmxp3420102cl
All versions
Configuration U
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M340 Bmxp342020 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M340 Bmxp342020
All versions
Configuration V
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M340 Bmxp3420302 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M340 Bmxp3420302
All versions
Configuration W
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M340 Bmxp3420302cl Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M340 Bmxp3420302cl
All versions
Configuration X
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M340 Bmxp3420302h Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M340 Bmxp3420302h
All versions
Configuration Y
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M340 Bmxp342020h Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M340 Bmxp342020h
All versions
Configuration Z
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M340 Bmxp341000h Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M340 Bmxp341000h
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxh5744m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxh5744m
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57104m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57104m
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57154m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57154m
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp571634m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp571634m
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57204m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57204m
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57254m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57254m
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp572634m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp572634m
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57304m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57304m
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57354m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57354m
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp573634m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp573634m
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57454m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57454m
All versions
Configuration M
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp574634m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp574634m
All versions
Configuration N
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp575634m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp575634m
All versions
Configuration O
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp576634m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp576634m
All versions
Configuration P
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxh5724mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxh5724mc
All versions
Configuration R
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57104mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57104mc
All versions
Configuration S
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57154mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57154mc
All versions
Configuration T
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp571634mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp571634mc
All versions
Configuration U
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57204mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57204mc
All versions
Configuration V
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57254mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57254mc
All versions
Configuration W
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp572634mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp572634mc
All versions
Configuration X
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57304mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57304mc
All versions
Configuration Y
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57354mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57354mc
All versions
Configuration Z
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp573634mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp573634mc
All versions
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57454mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57454mc
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp574634mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp574634mc
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57554mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57554mc
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp575634mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp575634mc
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp576634mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp576634mc
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxh5724m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxh5724m
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxh5744mc Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxh5744mc
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tsxp57554m Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Tsxp57554m
All versions

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

Source: cybersecurity@se.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.