The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.
El módulo Schneider Electric Quantum Ethernet, tal como se utiliza en los módulos Quantum 140NOE771* y 140CPU65*, los módulos Premium TSXETY* y TSXP57*, los módulos M340 BMXNOE01* y BMXP3420*, y los módulos STB DIO STBNIC2212 y STBNIP2*, utiliza contraseñas estáticas para las cuentas (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, y (16) webserver, lo que facilita a atacantes remotos obtener acceso a través de (a) TELNET, (b) Windriver Debug, o (c) el puerto FTP.
AV:N/AC:L/Au:N/C:C/I:C/A:C
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | COMPLETE |
| Integrity Impact | COMPLETE |
| Availability Impact | COMPLETE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-Other
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | quantum_ethernet_module_140cpu65150 | * | <built-in method update of dict object at 0x74655c532c40> | Application |
| schneider-electric | quantum_ethernet_module_140cpu65160 | * | <built-in method update of dict object at 0x746527d9af00> | Application |
| schneider-electric | quantum_ethernet_module_140cpu65260 | * | <built-in method update of dict object at 0x74655c10c640> | Application |
| schneider-electric | quantum_ethernet_module_140noe77100 | * | <built-in method update of dict object at 0x74652f26b9c0> | Application |
| schneider-electric | quantum_ethernet_module_140noe77100 | * | <built-in method update of dict object at 0x746527d9ab80> | Application |
| schneider-electric | quantum_ethernet_module_140noe77101 | * | <built-in method update of dict object at 0x74652ff458c0> | Application |
| schneider-electric | quantum_ethernet_module_140noe77111 | * | <built-in method update of dict object at 0x74655c10c7c0> | Application |
| schneider-electric | premium_ethernet_module_tsxety4103 | * | <built-in method update of dict object at 0x74652ff45680> | Application |
| schneider-electric | premium_ethernet_module_tsxety5103 | * | <built-in method update of dict object at 0x74652fdb3680> | Application |
| schneider-electric | premium_ethernet_module_tsxp57163m | * | <built-in method update of dict object at 0x746527d9ba00> | Application |
| schneider-electric | premium_ethernet_module_tsxp572634m | * | <built-in method update of dict object at 0x74655ddf0880> | Application |
| schneider-electric | premium_ethernet_module_tsxp573634m | * | <built-in method update of dict object at 0x746527383240> | Application |
| schneider-electric | premium_ethernet_module_tsxp574634m | * | <built-in method update of dict object at 0x74655ddde580> | Application |
| schneider-electric | premium_ethernet_module_tsxp575634m | * | <built-in method update of dict object at 0x74655c57c100> | Application |
| schneider-electric | premium_ethernet_module_tsxp576634m | * | <built-in method update of dict object at 0x746527380480> | Application |
| schneider-electric | m340_ethernet_module_bmxnoe0100 | * | <built-in method update of dict object at 0x746527383fc0> | Application |
| schneider-electric | m340_ethernet_module_bmxnoe0110 | * | <built-in method update of dict object at 0x7465273824c0> | Application |
| schneider-electric | m340_ethernet_module_bmxp342020 | * | <built-in method update of dict object at 0x746527380200> | Application |
| schneider-electric | m340_ethernet_module_bmxp342030 | * | <built-in method update of dict object at 0x746527383000> | Application |
| schneider-electric | stb_dio_ethernet_module_stbnic2212 | * | <built-in method update of dict object at 0x746527381c80> | Application |
| schneider-electric | stb_dio_ethernet_module_stbnip2212 | * | <built-in method update of dict object at 0x746527380e00> | Application |
| schneider-electric | stb_dio_ethernet_module_stbnip2311 | * | <built-in method update of dict object at 0x74655c58e240> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:quantum_ethernet_module_140cpu65150:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:quantum_ethernet_module_140cpu65160:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:quantum_ethernet_module_140cpu65260:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:quantum_ethernet_module_140noe77100:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:quantum_ethernet_module_140noe77100:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:quantum_ethernet_module_140noe77101:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:quantum_ethernet_module_140noe77111:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:premium_ethernet_module_tsxety4103:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:premium_ethernet_module_tsxety5103:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:premium_ethernet_module_tsxp57163m:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:premium_ethernet_module_tsxp572634m:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:premium_ethernet_module_tsxp573634m:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:premium_ethernet_module_tsxp574634m:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:premium_ethernet_module_tsxp575634m:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:premium_ethernet_module_tsxp576634m:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:m340_ethernet_module_bmxnoe0100:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:m340_ethernet_module_bmxnoe0110:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:m340_ethernet_module_bmxp342020:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:m340_ethernet_module_bmxp342030:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:stb_dio_ethernet_module_stbnic2212:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:stb_dio_ethernet_module_stbnip2212:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:stb_dio_ethernet_module_stbnip2311:*:*:*:*:*:*:*:* |