Description
A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) | Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) | — |
Advisories 2
- SEVD-2020-315-01 Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules Schneider Electric CPCERT · Feb 14, 2023
- ICSA-21-005-01 Schneider Electric Web Server on Modicon M340 CISA ICS & IT advisories · Jan 5, 2021