Aller au contenu
10.0 Non notée

CVE-2014-0754 Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec…

Description

Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.

Produits et versions touchés

Produit Versions touchées Corrigé en
Ethernet modules for M340, Quantum and Premium PLC ranges 171 171CCC96020C → 171CCC98030 Pas de correctif indiqué
Ethernet modules for M340, Quantum and Premium PLC ranges 170 170ENT11001 → 170ENT11002 Pas de correctif indiqué
Ethernet modules for M340, Quantum and Premium PLC ranges 140 140NWM10000 → 140NOC78100 Pas de correctif indiqué
Suivre cette CVE