1. Home
  2. CVE Database
  3. CVE-2018-7762
HIGH · 7.5

CVE-2018-7762

A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result in a buffer overflow...

Vulnerability Description

A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result in a buffer overflow.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
Schneider-ElectricBmxnor0200 Firmware-
Schneider-ElectricBmxnor0200-
Schneider-ElectricBmxnor0200H Firmware-
Schneider-ElectricBmxnor0200H-
Schneider-Electric140Cpu65150 Firmware-
Schneider-Electric140Cpu65150-
Schneider-Electric140Cpu31110 Firmware-
Schneider-Electric140Cpu31110-
Schneider-Electric140Cpu43412U Firmware-
Schneider-Electric140Cpu43412U-
Schneider-Electric140Cpu65160 Firmware-
Schneider-Electric140Cpu65160-
Schneider-Electric140Cpu65260 Firmware-
Schneider-Electric140Cpu65260-
Schneider-Electric140Cpu65860 Firmware-
Schneider-Electric140Cpu65860-
Schneider-Electric140Cpu65160S Firmware-
Schneider-Electric140Cpu65160S-
Schneider-Electric140Cpu65150C Firmware-
Schneider-Electric140Cpu65150C-

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2018-7762?

CVE-2018-7762 is a vulnerability with a CVSS score of 7.5 (HIGH). A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result in a buffer overflow...

How severe is CVE-2018-7762?

CVE-2018-7762 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-7762?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Bmxnor0200 Firmware, Schneider-Electric Bmxnor0200, Schneider-Electric Bmxnor0200H Firmware, Schneider-Electric Bmxnor0200H, Schneider-Electric 140Cpu65150 Firmware.