CVE-2020-7533 CRITICAL

Published: 2020-12-01 | Last Modified: 2025-06-10 | Status: Modified

Description

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests.

Additional Descriptions (1)

Una CWE-255: Se presenta una vulnerabilidad Administración de Credenciales en el Servidor Web en Modicon M340, Modicon Quantum y ofertas ModiconPremium Legacy y sus Módulos de Comunicación (véase la notificación de seguridad para la información de la versión) que podría causar una ejecución de comandos en el servidor web sin autenticación cuando se envía peticiones HTTP diseñadas

CVSS Metrics

Base Score: 9.8 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	HIGH
Integrity Impact	HIGH
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 5.9

Base Score: 7.5 (HIGH)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	PARTIAL
Integrity Impact	PARTIAL
Availability Impact	PARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 6.4

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-287
[email protected]	Secondary	en NVD-CWE-noinfo

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	modicon_m340_bmxp3420302_firmware	*	<built-in method update of dict object at 0x7e60e86ccc40>	Operating System
schneider-electric	modicon_m340_bmxp342000_firmware	*	<built-in method update of dict object at 0x7e60e86cc840>	Operating System
schneider-electric	modicon_m340_bmxp341000_firmware	*	<built-in method update of dict object at 0x7e60e86ce500>	Operating System
schneider-electric	modicon_m340_bmxp3420102_firmware	*	<built-in method update of dict object at 0x7e613c495cc0>	Operating System
schneider-electric	modicon_m340_bmxp3420302_firmware	*	<built-in method update of dict object at 0x7e60e86cc780>	Operating System
schneider-electric	bmxnoe0100_firmware	*	<built-in method update of dict object at 0x7e60e86cd6c0>	Operating System
schneider-electric	bmxnoe0110_firmware	*	<built-in method update of dict object at 0x7e6107e47940>	Operating System
schneider-electric	bmxnoc0401_firmware	*	<built-in method update of dict object at 0x7e60e86cff40>	Operating System
schneider-electric	tsxp574634_firmware	*	<built-in method update of dict object at 0x7e6112e73280>	Operating System
schneider-electric	tsxp575634_firmware	*	<built-in method update of dict object at 0x7e60e86ceb00>	Operating System
schneider-electric	tsxp576634_firmware	*	<built-in method update of dict object at 0x7e6112303fc0>	Operating System
schneider-electric	tsxety4103_firmware	*	<built-in method update of dict object at 0x7e60e86ce480>	Operating System
schneider-electric	tsxety5103_firmware	*	<built-in method update of dict object at 0x7e6107e45880>	Operating System
schneider-electric	140noe77111_firmware	*	<built-in method update of dict object at 0x7e61342e45c0>	Operating System
schneider-electric	140noc78000_firmware	*	<built-in method update of dict object at 0x7e60e86cf9c0>	Operating System
schneider-electric	140noc77101_firmware	*	<built-in method update of dict object at 0x7e60e86cf880>	Operating System
schneider-electric	140cpu65260_firmware	*	<built-in method update of dict object at 0x7e60e86cebc0>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp342000:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420102:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:bmxnoe0100_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmxnoe0100:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:bmxnoe0110_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmxnoe0110:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:bmxnoc0401_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmxnoc0401:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp574634_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp574634:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp575634_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp575634:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp576634_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp576634:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxety4103_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxety4103:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxety5103_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxety5103:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140noe77111_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140noe77111:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140noc78000_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140noc78000:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140noc77101_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140noc77101:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65260_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65260:-:::::::*`

References

https://download.schneider-electric.com/files?p_File_Name=SEVD-2020-287-01_Modicon_Web_Server_Security_Notificatiton.pdf&p_Doc_Ref=SEVD-2020-287-01&p_enDocType=Security+and+Safety+Notice
Source: [email protected]
https://www.se.com/ww/en/download/document/SEVD-2020-287-01/
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory