Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data.
Desbordamiento de buffer basado en pila en GoAhead Web Server en dispositivos Schneider Electric Modicon M340 PLC BMXNOx y BMXPx permite a atacantes remotos ejecutar código arbitrario a través de una contraseña larga en los datos de HTTP Basic Authentication.
AV:N/AC:L/Au:N/C:C/I:C/A:C
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | COMPLETE |
| Integrity Impact | COMPLETE |
| Availability Impact | COMPLETE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-119
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | bmxnoc0401 | - | <built-in method update of dict object at 0x7e60ba25ebc0> | Hardware |
| schneider-electric | bmxnoe0100 | - | <built-in method update of dict object at 0x7e611239d180> | Hardware |
| schneider-electric | bmxnoe0100h | - | <built-in method update of dict object at 0x7e6110cf6540> | Hardware |
| schneider-electric | bmxnoe0110 | - | <built-in method update of dict object at 0x7e611232c200> | Hardware |
| schneider-electric | bmxnoe0110h | - | <built-in method update of dict object at 0x7e60ba25c540> | Hardware |
| schneider-electric | bmxnor0200 | - | <built-in method update of dict object at 0x7e60e8814580> | Hardware |
| schneider-electric | bmxnor0200h | - | <built-in method update of dict object at 0x7e6110cf45c0> | Hardware |
| schneider-electric | bmxpra0100 | - | <built-in method update of dict object at 0x7e6110cf6200> | Hardware |
| schneider-electric | modicon_m340_bmxp342020 | - | <built-in method update of dict object at 0x7e6110cf4040> | Hardware |
| schneider-electric | modicon_m340_bmxp342020h | - | <built-in method update of dict object at 0x7e60ba25dfc0> | Hardware |
| schneider-electric | modicon_m340_bmxp342030 | - | <built-in method update of dict object at 0x7e6110cf5200> | Hardware |
| schneider-electric | modicon_m340_bmxp3420302 | - | <built-in method update of dict object at 0x7e611239f700> | Hardware |
| schneider-electric | modicon_m340_bmxp3420302h | - | <built-in method update of dict object at 0x7e6110cf6180> | Hardware |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:h:schneider-electric:bmxnoc0401:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:bmxnoe0100:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:bmxnoe0100h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:bmxnoe0110:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:bmxnoe0110h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:bmxnor0200:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:bmxnor0200h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:bmxpra0100:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020h:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp342030:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302h:-:*:*:*:*:*:*:* |