Skip to content
OpenAdvisories
High SEVD-2015-344-01 1 CVE

GoAhead Web Server vulnerability

Published Dec 15, 2015 · Updated Jun 9, 2020 · Revision 2

Vendor: Schneider Electric Product: BMXNOC0401 Product: BMXNOE0100 Product: BMXNOE0100H Product: BMXNOE0110 Product: BMXNOE0110H Product: BMXNOR0200 Product: BMXNOR0200H Product: BMXP342020 Product: BMXP342020H Product: BMXP342030 Product: BMXP3420302 Product: BMXP3420302H Product: BMXPRA0100

Summary

Schneider Electric is aware of a proof of concept exploit available for this vulnerability. It is
imperative that customers upgrade the firmware for the affected products.

Vulnerabilities 1

  • Unscored —
    CVE-2015-7937

    Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices a…

Revision history

  1. #2.0.0

    Updated overview and remediation section (pages 1-3)

  2. #1.0.0

    Original Release

References