CVE-2018-7804

Summary

A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially crafted link can be redirected to a URL of the attacker's choosing.

Affected Software

VendorProductVersion RangeStatus
Schneider Electric SEEmbedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200affected

Weaknesses

  • URL Redirection to Untrusted Site

ADP Enrichment

CVE Program Container

Additional References

References