Medium ICSA-18-086-01 3 CVEs

Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200

Published Mar 27, 2018 · Updated Mar 27, 2018

Vendor: Schneider Electric Product: Modicon M340 Product: Modicon Premium Product: Modicon Quantum Product: Modicon X80 RTU (BMXNOR0200H)

Summary

ATTENTION: Exploitable remotely/low skill level to exploit.

Vulnerabilities 3

Unscored —

CVE-2018-7240

A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could…

Schneider Electric Modicon Quantum ICS / OT

Apr 18, 2018
Unscored —

CVE-2018-7241

Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 contro…

Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, BMXNOR0200 ICS / OT

Apr 18, 2018
Unscored —

CVE-2018-7242

Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR020…

Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, BMXNOR0200 ICS / OT

Apr 18, 2018

Revision history

2018-03-27 #1
ICSA-18-086-01 Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200

References

ICS Advisory ICSA-18-086-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-086-01
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/