1. Home
  2. CVE Database
  3. CVE-2018-7240
HIGH · 8.8

CVE-2018-7240

A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of t...

Vulnerability Description

A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.

CVSS Score

8.8

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Schneider-Electric140Cpu65150 Firmware-
Schneider-Electric140Cpu65150-
Schneider-Electric140Cpu31110 Firmware-
Schneider-Electric140Cpu31110-
Schneider-Electric140Cpu43412U Firmware-
Schneider-Electric140Cpu43412U-
Schneider-Electric140Cpu65160 Firmware-
Schneider-Electric140Cpu65160-
Schneider-Electric140Cpu65260 Firmware-
Schneider-Electric140Cpu65260-
Schneider-Electric140Cpu65860 Firmware-
Schneider-Electric140Cpu65860-
Schneider-Electric140Cpu65160S Firmware-
Schneider-Electric140Cpu65160S-
Schneider-Electric140Cpu65150C Firmware-
Schneider-Electric140Cpu65150C-
Schneider-Electric140Cpu31110C Firmware-
Schneider-Electric140Cpu31110C-
Schneider-Electric140Cpu43412Uc Firmware-
Schneider-Electric140Cpu43412Uc-

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2018-7240?

CVE-2018-7240 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of t...

How severe is CVE-2018-7240?

CVE-2018-7240 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-7240?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric 140Cpu65150 Firmware, Schneider-Electric 140Cpu65150, Schneider-Electric 140Cpu31110 Firmware, Schneider-Electric 140Cpu31110, Schneider-Electric 140Cpu43412U Firmware.