CVE-2020-7477 HIGH

Published: 2020-03-23 | Last Modified: 2026-05-28 | Status: Modified

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 (Versions 7.0 and prior), Quantum processors with integrated Ethernet – 140CPU65xxxxx (all Versions), and Premium processors with integrated Ethernet (all Versions), which could cause a Denial of Service when sending a specially crafted command over Modbus.

Additional Descriptions (1)

Una CWE-754: Se presenta una vulnerabilidad Comprobación Inapropiada de Condiciones Inusuales o Excepcionales en el módulo Quantum Ethernet Network 140NOE771x1 (Versiones 7.0 y anteriores), procesadores Quantum con Ethernet integrado - 140CPU65xxxxx (todas las Versiones) y procesadores Premium con Ethernet integrado (todas las Versiones), lo que podría causar una Denegación de servicio al enviar un comando especialmente diseñado sobre Modbus.

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	PARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-754
[email protected]	Primary	en CWE-754

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	140noe77101_firmware	*	<built-in method update of dict object at 0x7e6110cf40c0>	Operating System
schneider-electric	140noe77111_firmware	*	<built-in method update of dict object at 0x7e60a888c380>	Operating System
schneider-electric	tsxh5744m_firmware	*	<built-in method update of dict object at 0x7e60a88afb80>	Operating System
schneider-electric	tsxh5724m_firmware	*	<built-in method update of dict object at 0x7e60a88afb00>	Operating System
schneider-electric	tsxp576634m_firmware	*	<built-in method update of dict object at 0x7e6110cf4f40>	Operating System
schneider-electric	tsxp57554m_firmware	*	<built-in method update of dict object at 0x7e6110cf4600>	Operating System
schneider-electric	tsxp575634m_firmware	*	<built-in method update of dict object at 0x7e60a88ac7c0>	Operating System
schneider-electric	tsxp57454m_firmware	*	<built-in method update of dict object at 0x7e6110cf5440>	Operating System
schneider-electric	tsxp574634m_firmware	*	<built-in method update of dict object at 0x7e60a88acd80>	Operating System
schneider-electric	tsxp573634m_firmware	*	<built-in method update of dict object at 0x7e6110cf4d40>	Operating System
schneider-electric	tsxp57304m_firmware	*	<built-in method update of dict object at 0x7e60ba2a6dc0>	Operating System
schneider-electric	tsxp57254m_firmware	*	<built-in method update of dict object at 0x7e60a88afe00>	Operating System
schneider-electric	tsxp572634m_firmware	*	<built-in method update of dict object at 0x7e60a88aefc0>	Operating System
schneider-electric	tsxp57204m_firmware	*	<built-in method update of dict object at 0x7e60a88af6c0>	Operating System
schneider-electric	tsxp571634m_firmware	*	<built-in method update of dict object at 0x7e60a888e240>	Operating System
schneider-electric	tsxp57154m_firmware	*	<built-in method update of dict object at 0x7e60ba2a4e80>	Operating System
schneider-electric	tsxp57104m_firmware	*	<built-in method update of dict object at 0x7e6110cf5d00>	Operating System
schneider-electric	140cpu65150_firmware	*	<built-in method update of dict object at 0x7e60a888e180>	Operating System
schneider-electric	140cpu65160_firmware	*	<built-in method update of dict object at 0x7e60ba25c500>	Operating System
schneider-electric	140cpu65260_firmware	*	<built-in method update of dict object at 0x7e60e8816700>	Operating System
schneider-electric	140cpu67261_firmware	*	<built-in method update of dict object at 0x7e60e8814a40>	Operating System
schneider-electric	140cpu67060_firmware	*	<built-in method update of dict object at 0x7e60a888ffc0>	Operating System
schneider-electric	140cpu67160_firmware	*	<built-in method update of dict object at 0x7e6110cf5640>	Operating System
schneider-electric	140cpu67261_firmware	*	<built-in method update of dict object at 0x7e60ba2a74c0>	Operating System
schneider-electric	140cpu67260_firmware	*	<built-in method update of dict object at 0x7e60a88aed80>	Operating System
schneider-electric	140cpu65860_firmware	*	<built-in method update of dict object at 0x7e60a888ff40>	Operating System
schneider-electric	140cpu67861_firmware	*	<built-in method update of dict object at 0x7e60a88ac980>	Operating System
schneider-electric	140cpu65160s_firmware	*	<built-in method update of dict object at 0x7e60a888ff00>	Operating System
schneider-electric	140cpu67160s_firmware	*	<built-in method update of dict object at 0x7e60a88ad740>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140noe77101_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140noe77101:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140noe77111_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140noe77111:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxh5744m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxh5744m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxh5724m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxh5724m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp576634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp576634m_:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57554m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57554m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp575634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp575634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57454m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57454m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp574634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp574634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp573634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp573634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57304m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57304m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57254m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57254m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp572634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp572634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57204m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57204m_:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp571634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp571634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57154m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57154m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57104m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57104m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65150_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65150:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65160_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65160:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65260_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65260:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67261_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67261:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67060_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67060:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67160_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67160:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67261_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67261:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67260_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67260:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65860_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65860:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67861_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67861:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65160s_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65160s:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67160s_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67160s:-:::::::*`

References

https://www.se.com/ww/en/download/document/SEVD-2020-070-02/
Source: [email protected]

Vendor Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-070-02/
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory