CVE-2018-7804 MEDIUM

Published: 2018-12-17 | Last Modified: 2026-06-17 | Status: Modified

Description

A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially crafted link can be redirected to a URL of the attacker's choosing.

Additional Descriptions (1)

Existe una vulnerabilidad de redirección de URL a sitio no fiable en los servidores web embebidos en todos los Modicon M340, Premium, Quantum PLCs y BMXNOR0200, donde un usuario que hace clic en un enlace especialmente manipulado puede ser redirigido a una URL escogida por el atacante.

CVSS Metrics

Base Score: 5.8 (MEDIUM)

AV:N/AC:M/Au:N/C:P/I:P/A:N

Access Vector	NETWORK
Access Complexity	MEDIUM
Authentication	NONE
Confidentiality Impact	PARTIAL
Integrity Impact	PARTIAL
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 8.6

Impact Score: 4.9

Weaknesses

Source	Type	Description
[email protected]	Primary	en CWE-601

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	modicom_m340_firmware	*	<built-in method update of dict object at 0x7e60ba1a3e80>	Operating System
schneider-electric	modicom_premium_firmware	*	<built-in method update of dict object at 0x7e6107e46940>	Operating System
schneider-electric	modicom_quantum_firmware	*	<built-in method update of dict object at 0x7e60e88357c0>	Operating System
schneider-electric	modicom_bmxnor0200h_firmware	*	<built-in method update of dict object at 0x7e6110c99100>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicom_m340_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicom_m340:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicom_premium_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicom_premium::::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicom_quantum_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicom_quantum::::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicom_bmxnor0200h_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicom_bmxnor0200h:-:::::::*`

References

https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
Source: [email protected]

Vendor Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory