CVE-2018-7242 CRITICAL

Published: 2018-04-18 | Last Modified: 2026-06-17 | Status: Modified

Description

Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.

Additional Descriptions (1)

Existen algoritmos de hash vulnerables en los controladores Modicon Premium, Modicon Quantum, Modicon M340 y BMXNOR0200, de Schneider Electric, en todas las versiones de los módulos de comunicación. El algoritmo empleado para cifrar la contraseña es vulnerable a ataques de colisión de hash.

CVSS Metrics

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	PARTIAL
Integrity Impact	NONE
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Primary	en CWE-326

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	bmxnor0200_firmware	-	<built-in method update of dict object at 0x7e611239fb40>	Operating System
schneider-electric	bmxnor0200h_firmware	-	<built-in method update of dict object at 0x7e6110cf4040>	Operating System
schneider-electric	140cpu65150_firmware	-	<built-in method update of dict object at 0x7e60eb2da700>	Operating System
schneider-electric	140cpu31110_firmware	-	<built-in method update of dict object at 0x7e60ba25c780>	Operating System
schneider-electric	140cpu43412u_firmware	-	<built-in method update of dict object at 0x7e611239e0c0>	Operating System
schneider-electric	140cpu65160_firmware	-	<built-in method update of dict object at 0x7e60ba25d500>	Operating System
schneider-electric	140cpu65260_firmware	-	<built-in method update of dict object at 0x7e60a88acb80>	Operating System
schneider-electric	140cpu65860_firmware	-	<built-in method update of dict object at 0x7e6110cf4d00>	Operating System
schneider-electric	140cpu65160s_firmware	-	<built-in method update of dict object at 0x7e60ba25d9c0>	Operating System
schneider-electric	140cpu65150c_firmware	-	<built-in method update of dict object at 0x7e611239d9c0>	Operating System
schneider-electric	140cpu31110c_firmware	-	<built-in method update of dict object at 0x7e60a88ac980>	Operating System
schneider-electric	140cpu43412uc_firmware	-	<built-in method update of dict object at 0x7e6110cf46c0>	Operating System
schneider-electric	140cpu65160c_firmware	-	<built-in method update of dict object at 0x7e60ba25f980>	Operating System
schneider-electric	140cpu65160c_firmware	-	<built-in method update of dict object at 0x7e6110cf5200>	Operating System
schneider-electric	140cpu65260c_firmware	-	<built-in method update of dict object at 0x7e6110cf6580>	Operating System
schneider-electric	140cpu65860c_firmware	-	<built-in method update of dict object at 0x7e60ba25c340>	Operating System
schneider-electric	modicon_m340_bmxp341000_firmware	-	<built-in method update of dict object at 0x7e60e885a740>	Operating System
schneider-electric	modicon_m340_bmxp342000_firmware	-	<built-in method update of dict object at 0x7e6110cf5880>	Operating System
schneider-electric	modicon_m340_bmxp3420102_firmware	-	<built-in method update of dict object at 0x7e60a888f740>	Operating System
schneider-electric	modicon_m340_bmxp3420102cl_firmware	-	<built-in method update of dict object at 0x7e60e8814900>	Operating System
schneider-electric	modicon_m340_bmxp342020_firmware	-	<built-in method update of dict object at 0x7e6110cf5e80>	Operating System
schneider-electric	modicon_m340_bmxp3420302_firmware	-	<built-in method update of dict object at 0x7e6110cf6ec0>	Operating System
schneider-electric	modicon_m340_bmxp3420302cl_firmware	-	<built-in method update of dict object at 0x7e60a88ace80>	Operating System
schneider-electric	modicon_m340_bmxp3420302h_firmware	-	<built-in method update of dict object at 0x7e6110cf7c40>	Operating System
schneider-electric	modicon_m340_bmxp342020h_firmware	-	<built-in method update of dict object at 0x7e611232c080>	Operating System
schneider-electric	modicon_m340_bmxp341000h_firmware	-	<built-in method update of dict object at 0x7e60a88ac7c0>	Operating System
schneider-electric	tsxh5724m_firmware	-	<built-in method update of dict object at 0x7e60ba25c7c0>	Operating System
schneider-electric	tsxh5744m_firmware	-	<built-in method update of dict object at 0x7e6110cf4440>	Operating System
schneider-electric	tsxp57104m_firmware	-	<built-in method update of dict object at 0x7e60a88ac300>	Operating System
schneider-electric	tsxp57154m_firmware	-	<built-in method update of dict object at 0x7e60a888eb00>	Operating System
schneider-electric	tsxp571634m_firmware	-	<built-in method update of dict object at 0x7e6110cf60c0>	Operating System
schneider-electric	tsxp57204m_firmware	-	<built-in method update of dict object at 0x7e60a888d040>	Operating System
schneider-electric	tsxp57254m_firmware	-	<built-in method update of dict object at 0x7e60a88afe40>	Operating System
schneider-electric	tsxp572634m_firmware	-	<built-in method update of dict object at 0x7e60a888f6c0>	Operating System
schneider-electric	tsxp57304m_firmware	-	<built-in method update of dict object at 0x7e60a888cac0>	Operating System
schneider-electric	tsxp57354m_firmware	-	<built-in method update of dict object at 0x7e60a888d680>	Operating System
schneider-electric	tsxp573634m_firmware	-	<built-in method update of dict object at 0x7e60a88acd00>	Operating System
schneider-electric	tsxp57454m_firmware	-	<built-in method update of dict object at 0x7e6110cf5a80>	Operating System
schneider-electric	tsxp574634m_firmware	-	<built-in method update of dict object at 0x7e6110cf7540>	Operating System
schneider-electric	tsxp575634m_firmware	-	<built-in method update of dict object at 0x7e6110cf6a40>	Operating System
schneider-electric	tsxp576634m_firmware	-	<built-in method update of dict object at 0x7e6110cf5cc0>	Operating System
schneider-electric	tsxh5724mc_firmware	-	<built-in method update of dict object at 0x7e6110cf4600>	Operating System
schneider-electric	tsxh5744mc_firmware	-	<built-in method update of dict object at 0x7e6110cf7880>	Operating System
schneider-electric	tsxp57104mc_firmware	-	<built-in method update of dict object at 0x7e6110cf6140>	Operating System
schneider-electric	tsxp57154mc_firmware	-	<built-in method update of dict object at 0x7e6110cf7140>	Operating System
schneider-electric	tsxp571634mc_firmware	-	<built-in method update of dict object at 0x7e6110cf7b80>	Operating System
schneider-electric	tsxp57204mc_firmware	-	<built-in method update of dict object at 0x7e6110cf5100>	Operating System
schneider-electric	tsxp57254mc_firmware	-	<built-in method update of dict object at 0x7e6110cf4880>	Operating System
schneider-electric	tsxp572634mc_firmware	-	<built-in method update of dict object at 0x7e6110cf6740>	Operating System
schneider-electric	tsxp57304mc_firmware	-	<built-in method update of dict object at 0x7e6110cf5000>	Operating System
schneider-electric	tsxp57354mc_firmware	-	<built-in method update of dict object at 0x7e6110cf4b00>	Operating System
schneider-electric	tsxp573634mc_firmware	-	<built-in method update of dict object at 0x7e6110cf5080>	Operating System
schneider-electric	tsxp57454mc_firmware	-	<built-in method update of dict object at 0x7e6110cf53c0>	Operating System
schneider-electric	tsxp574634mc_firmware	-	<built-in method update of dict object at 0x7e6110cf4bc0>	Operating System
schneider-electric	tsxp57554mc_firmware	-	<built-in method update of dict object at 0x7e6110cf59c0>	Operating System
schneider-electric	tsxp575634mc_firmware	-	<built-in method update of dict object at 0x7e60eb2d8780>	Operating System
schneider-electric	tsxp576634mc_firmware	-	<built-in method update of dict object at 0x7e60a888ff80>	Operating System
schneider-electric	tsxh5724m_firmware	-	<built-in method update of dict object at 0x7e60a88ad900>	Operating System
schneider-electric	tsxh5744mc_firmware	-	<built-in method update of dict object at 0x7e60a888df00>	Operating System
schneider-electric	tsxp57554m_firmware	-	<built-in method update of dict object at 0x7e60bae0e000>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:bmxnor0200_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmxnor0200:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:bmxnor0200h_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmxnor0200h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65150_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65150:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu31110_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu31110:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu43412u_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu43412u:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65160_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65160:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65260_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65260:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65860_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65860:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65160s_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65160s:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65150c_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65150c:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu31110c_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu31110c:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu43412uc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu43412uc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65160c_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65160c:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65160c_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65160c:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65260c_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65260c:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65860c_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65860c:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp342000:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420102:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102cl_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420102cl:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302cl_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302cl:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302h_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020h_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000h_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxh5724m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxh5724m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxh5744m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxh5744m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57104m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57104m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57154m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57154m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp571634m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp571634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57204m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57204m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57254m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57254m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp572634m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp572634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57304m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57304m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57354m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57354m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp573634m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp573634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57454m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57454m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp574634m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp574634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp575634m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp575634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp576634m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp576634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxh5724mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxh5724mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxh5744mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxh5744mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57104mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57104mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57154mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57154mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp571634mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp571634mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57204mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57204mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57254mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57254mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp572634mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp572634mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57304mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57304mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57354mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57354mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp573634mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp573634mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57454mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57454mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp574634mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp574634mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57554mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57554mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp575634mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp575634mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp576634mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp576634mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxh5724m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxh5724m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxh5744mc_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxh5744mc:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57554m_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57554m:-:::::::*`

References

http://www.securityfocus.com/bid/103543
Source: [email protected]

Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01
Source: [email protected]

Third Party Advisory US Government Resource
https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/
Source: [email protected]

Vendor Advisory
http://www.securityfocus.com/bid/103543
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory US Government Resource
https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory