Skip to content
OpenAdvisories
Unscored CVE-2018-7804 EUVD-2018-19516GHSA-prjw-g7wq-rf93

A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0…

Published Dec 17, 2018 · Updated Aug 5, 2024 · Assigned by schneider

Description

A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially crafted link can be redirected to a URL of the attacker's choosing.

Affected products

VendorProductAffectedFixed
Schneider Electric SE Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 —

References