Skip to content
OpenAdvisories
Unscored CVE-2018-7811 EUVD-2018-19523GHSA-cqmj-26m2-wvgh

An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 wh…

Published Nov 30, 2018 · Updated Aug 5, 2024 · Assigned by schneider

Description

An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the change password function of the web server

Affected products

VendorProductAffectedFixed
Schneider Electric SE Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 —

References