CVE-2018-7241 : Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quant

Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.

Published 2018-04-18 20:29:00

Updated 2018-12-05 21:29:01

Source Schneider Electric SE

View at NVD, CVE.org

Products affected by CVE-2018-7241

Schneider-electric » 140cpu65150 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:140cpu65150_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu65150 » Version: N/A
Schneider-electric » 140cpu31110 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:140cpu31110_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu31110 » Version: N/A
Schneider-electric » 140cpu43412u Firmware » Version: N/A
cpe:2.3:o:schneider-electric:140cpu43412u_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu43412u » Version: N/A
Schneider-electric » 140cpu65160 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:140cpu65160_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu65160 » Version: N/A
Schneider-electric » 140cpu65260 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:140cpu65260_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu65260 » Version: N/A
Schneider-electric » 140cpu65860 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:140cpu65860_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu65860 » Version: N/A
Schneider-electric » 140cpu65160s Firmware » Version: N/A
cpe:2.3:o:schneider-electric:140cpu65160s_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu65160s » Version: N/A
Schneider-electric » 140cpu65150c Firmware » Version: N/A
cpe:2.3:o:schneider-electric:140cpu65150c_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu65150c » Version: N/A
Schneider-electric » 140cpu31110c Firmware » Version: N/A
cpe:2.3:o:schneider-electric:140cpu31110c_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu31110c » Version: N/A
Schneider-electric » 140cpu43412uc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:140cpu43412uc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu43412uc » Version: N/A
Schneider-electric » 140cpu65160c Firmware » Version: N/A
cpe:2.3:o:schneider-electric:140cpu65160c_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu65160c » Version: N/A
Schneider-electric » 140cpu65260c Firmware » Version: N/A
cpe:2.3:o:schneider-electric:140cpu65260c_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu65260c » Version: N/A
Schneider-electric » 140cpu65860c Firmware » Version: N/A
cpe:2.3:o:schneider-electric:140cpu65860c_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu65860c » Version: N/A
Schneider-electric » Bmxnor0200 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxnor0200_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxnor0200 » Version: N/A
Schneider-electric » Bmxnor0200h Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxnor0200h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxnor0200h » Version: N/A
Schneider-electric » Bmxp341000 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp341000_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp341000 » Version: N/A
Schneider-electric » Bmxp342000 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp342000_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp342000 » Version: N/A
Schneider-electric » Bmxp3420102 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp3420102_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp3420102 » Version: N/A
Schneider-electric » Bmxp3420102cl Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp3420102cl_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp3420102cl » Version: N/A
Schneider-electric » Bmxp342020 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp342020_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp342020 » Version: N/A
Schneider-electric » Bmxp3420302 Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp3420302_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp3420302 » Version: N/A
Schneider-electric » Bmxp3420302cl Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp3420302cl_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp3420302cl » Version: N/A
Schneider-electric » Bmxp3420302h Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp3420302h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp3420302h » Version: N/A
Schneider-electric » Bmxp342020h Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp342020h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp342020h » Version: N/A
Schneider-electric » Bmxp341000h Firmware » Version: N/A
cpe:2.3:o:schneider-electric:bmxp341000h_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp341000h » Version: N/A
Schneider-electric » Tsxh5724m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxh5724m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxh5724m » Version: N/A
Schneider-electric » Tsxh5744m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxh5744m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxh5744m » Version: N/A
Schneider-electric » Tsxp57104m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57104m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57104m » Version: N/A
Schneider-electric » Tsxp57154m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57154m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57154m » Version: N/A
Schneider-electric » Tsxp571634m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp571634m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp571634m » Version: N/A
Schneider-electric » Tsxp57204m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57204m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57204m » Version: N/A
Schneider-electric » Tsxp57254m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57254m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57254m » Version: N/A
Schneider-electric » Tsxp572634m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp572634m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp572634m » Version: N/A
Schneider-electric » Tsxp57304m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57304m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57304m » Version: N/A
Schneider-electric » Tsxp57354m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57354m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57354m » Version: N/A
Schneider-electric » Tsxp573634m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp573634m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp573634m » Version: N/A
Schneider-electric » Tsxp57454m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57454m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57454m » Version: N/A
Schneider-electric » Tsxp574634m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp574634m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp574634m » Version: N/A
Schneider-electric » Tsxp575634m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp575634m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp575634m » Version: N/A
Schneider-electric » Tsxp576634m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp576634m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp576634m » Version: N/A
Schneider-electric » Tsxh5724mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxh5724mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxh5724mc » Version: N/A
Schneider-electric » Tsxh5744mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxh5744mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxh5744mc » Version: N/A
Schneider-electric » Tsxp57104mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57104mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57104mc » Version: N/A
Schneider-electric » Tsxp57154mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57154mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57154mc » Version: N/A
Schneider-electric » Tsxp571634mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp571634mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp571634mc » Version: N/A
Schneider-electric » Tsxp57204mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57204mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57204mc » Version: N/A
Schneider-electric » Tsxp57254mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57254mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57254mc » Version: N/A
Schneider-electric » Tsxp572634mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp572634mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp572634mc » Version: N/A
Schneider-electric » Tsxp57304mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57304mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57304mc » Version: N/A
Schneider-electric » Tsxp57354mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57354mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57354mc » Version: N/A
Schneider-electric » Tsxp573634mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp573634mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp573634mc » Version: N/A
Schneider-electric » Tsxp57454mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57454mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57454mc » Version: N/A
Schneider-electric » Tsxp574634mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp574634mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp574634mc » Version: N/A
Schneider-electric » Tsxp57554mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57554mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57554mc » Version: N/A
Schneider-electric » Tsxp575634mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp575634mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp575634mc » Version: N/A
Schneider-electric » Tsxp576634mc Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp576634mc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp576634mc » Version: N/A
Schneider-electric » Tsxp57554m Firmware » Version: N/A
cpe:2.3:o:schneider-electric:tsxp57554m_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp57554m » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-7241

EPSS FAQ

0.58%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 66 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-7241

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-7241

CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-7241

http://www.securityfocus.com/bid/103542

Multiple Schneider Electric Modicon Products CVE-2018-7241 Remote Security Vulnerability
Third Party Advisory;VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01

Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200 | CISA
Third Party Advisory;US Government Resource

CVEs referencing this url
https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/

Security Notification - Embedded FTP Servers for Modicon | Schneider Electric
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2018-7241

Products affected by CVE-2018-7241

Exploit prediction scoring system (EPSS) score for CVE-2018-7241

CVSS scores for CVE-2018-7241

CWE ids for CVE-2018-7241

References for CVE-2018-7241