CVE-2015-6461 : Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401,

Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will result in the browser redirecting to a remote file via a Java script loaded with the web page.

Published 2019-03-21 19:29:00

Updated 2019-10-09 23:14:59

Source ICS-CERT

View at NVD, CVE.org

Vulnerability category: File inclusionInput validation

Exploit prediction scoring system (EPSS) score for CVE-2015-6461

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 31 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-6461

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:N	8.0	4.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None
5.4	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N	2.8	2.5	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: None

CWE ids for CVE-2015-6461

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.

Assigned by: ics-cert@hq.dhs.gov (Secondary)

Products affected by CVE-2015-6461

Schneider-electric » Bmxnor0200h Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxnor0200h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxnor0200h » Version: N/A
Schneider-electric » Bmxp342020 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp342020_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp342020 » Version: N/A
Schneider-electric » Bmxp3420302 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp3420302_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp3420302 » Version: N/A
Schneider-electric » Bmxp3420302h Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp3420302h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp3420302h » Version: N/A
Schneider-electric » Bmxp342020h Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp342020h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp342020h » Version: N/A
Schneider-electric » Bmxnoc0401 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxnoc0401_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxnoc0401 » Version: N/A
Schneider-electric » Bmxnoe0100 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxnoe0100_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxnoe0100 » Version: N/A
Schneider-electric » Bmxnoe0110 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxnoe0110_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxnoe0110 » Version: N/A
Schneider-electric » Bmxnoe0110h Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxnoe0110h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxnoe0110h » Version: N/A
Schneider-electric » Bmxp342030 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp342030_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp342030 » Version: N/A
Schneider-electric » Bmxp342030h Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp342030h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp342030h » Version: N/A

Vulnerability Details : CVE-2015-6461

Exploit prediction scoring system (EPSS) score for CVE-2015-6461

CVSS scores for CVE-2015-6461

CWE ids for CVE-2015-6461

References for CVE-2015-6461

Products affected by CVE-2015-6461