vulnwire
9.8crit

CVE-2018-7809

An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 wh…

Published 7 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.5%
percentile 85%
Public exploits
0
none known

An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the password delete function of the web server.

Exploit prediction (EPSS)

2.47% probability of exploitation in the next 30 days, higher than 85% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.09.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.06.4AV:N/AC:L/Au:N/C:N/I:P/A:P

Affected products

  • Schneider Electric SE Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200

Classification

Weakness
  • CWE-640 Weak Password Recovery Mechanism for Forgotten Password

References

  • tenable.com /security/research/tra-2018-38 · x_refsource_MISC, x_transferred
  • schneider-electric.com /en/download/document/SEVD-2018-327-01/ · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.