Description
A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric SE | Modicon Quantum | All versions of Modicon Quantum communication modules | — |
Advisories 2
- SEVD-2018-081-01 Embedded FTP Servers for Modicon PAC Controllers Schneider Electric CPCERT · Aug 13, 2024
- ICSA-18-086-01 Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200 CISA ICS & IT advisories · Mar 27, 2018