CVE-2020-7540 : A CWE-306: Missing Authentication for Critical Function vulnerability exists in

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.

Published 2020-12-11 01:15:12

Updated 2020-12-14 21:00:57

Source Schneider Electric SE

View at NVD, CVE.org

Products affected by CVE-2020-7540

Schneider-electric » 140cpu65150 Firmware
Versions before (<) 6.1
cpe:2.3:o:schneider-electric:140cpu65150_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu65150 » Version: N/A
Schneider-electric » 140cpu65160 Firmware
Versions before (<) 6.1
cpe:2.3:o:schneider-electric:140cpu65160_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140cpu65160 » Version: N/A
Schneider-electric » Bmxp341000 Firmware
Versions before (<) 3.30
cpe:2.3:o:schneider-electric:bmxp341000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp341000 » Version: N/A
Schneider-electric » Bmxp342000 Firmware
Versions before (<) 3.30
cpe:2.3:o:schneider-electric:bmxp342000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp342000 » Version: N/A
Schneider-electric » Bmxp3420102 Firmware
Versions before (<) 3.30
cpe:2.3:o:schneider-electric:bmxp3420102_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp3420102 » Version: N/A
Schneider-electric » Bmxp3420102cl Firmware
Versions before (<) 3.30
cpe:2.3:o:schneider-electric:bmxp3420102cl_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp3420102cl » Version: N/A
Schneider-electric » Bmxp342020 Firmware
Versions before (<) 3.30
cpe:2.3:o:schneider-electric:bmxp342020_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp342020 » Version: N/A
Schneider-electric » Bmxp3420302 Firmware
Versions before (<) 3.30
cpe:2.3:o:schneider-electric:bmxp3420302_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp3420302 » Version: N/A
Schneider-electric » Bmxp3420302cl Firmware
Versions before (<) 3.30
cpe:2.3:o:schneider-electric:bmxp3420302cl_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxp3420302cl » Version: N/A
Schneider-electric » Bmxnoc0401 Firmware
Versions before (<) 2.10
cpe:2.3:o:schneider-electric:bmxnoc0401_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxnoc0401 » Version: N/A
Schneider-electric » Bmxnoe0100 Firmware
Versions before (<) 3.3
cpe:2.3:o:schneider-electric:bmxnoe0100_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxnoe0100 » Version: N/A
Schneider-electric » Bmxnoe0110 Firmware
Versions before (<) 6.5
cpe:2.3:o:schneider-electric:bmxnoe0110_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxnoe0110 » Version: N/A
Schneider-electric » 140noe77101 Firmware
Versions before (<) 7.1
cpe:2.3:o:schneider-electric:140noe77101_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140noe77101 » Version: N/A
Schneider-electric » 140noe77111 Firmware
Versions before (<) 7.1
cpe:2.3:o:schneider-electric:140noe77111_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140noe77111 » Version: N/A
Schneider-electric » Tsxp574634 Firmware
Versions before (<) 6.1
cpe:2.3:o:schneider-electric:tsxp574634_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp574634 » Version: N/A
Schneider-electric » Tsxp575634 Firmware
Versions before (<) 6.1
cpe:2.3:o:schneider-electric:tsxp575634_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp575634 » Version: N/A
Schneider-electric » Tsxp576634 Firmware
Versions before (<) 6.1
cpe:2.3:o:schneider-electric:tsxp576634_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxp576634 » Version: N/A
Schneider-electric » Tsxety4103 Firmware
Versions before (<) 6.2
cpe:2.3:o:schneider-electric:tsxety4103_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxety4103 » Version: N/A
Schneider-electric » Tsxety5103 Firmware
Versions before (<) 6.4
cpe:2.3:o:schneider-electric:tsxety5103_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Tsxety5103 » Version: N/A
Schneider-electric » 140noc78000 Firmware
Versions before (<) 1.74
cpe:2.3:o:schneider-electric:140noc78000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140noc78000 » Version: N/A
Schneider-electric » 140noc77101 Firmware
Versions before (<) 1.08
cpe:2.3:o:schneider-electric:140noc77101_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140noc77101 » Version: N/A
Schneider-electric » 140noc78100 Firmware
Versions before (<) 1.74
cpe:2.3:o:schneider-electric:140noc78100_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » 140noc78100 » Version: N/A
Schneider-electric » Bmxnor200h Firmware
cpe:2.3:o:schneider-electric:bmxnor200h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Schneider-electric » Bmxnor200h » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-7540

EPSS FAQ

0.38%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 73 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-7540

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-7540

CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Assigned by: cybersecurity@se.com (Primary)

References for CVE-2020-7540

https://www.se.com/ww/en/download/document/SEVD-2020-343-04/

Security Notification - Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules | Schneider Electric
Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-7540

Products affected by CVE-2020-7540

Exploit prediction scoring system (EPSS) score for CVE-2020-7540

CVSS scores for CVE-2020-7540

CWE ids for CVE-2020-7540

References for CVE-2020-7540