CVE-2020-7533

Tuesday, December 01, 2020

N/A

Summary

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests.

Affected Software

Vendor	Product	Version Range	Status
n/a	Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see security notification for version information)	`Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see security notification for version information)`	affected

Weaknesses

CWE-287: CWE-287 Improper Authentication

ADP Enrichment

CVE Program Container

Additional References

https://www.se.com/ww/en/download/document/SEVD-2020-287-01/

References

https://download.schneider-electric.com/files?p_File_Name=SEVD-2020-287-01_Modicon_Web_Server_Security_Notificatiton.pdf&p_Doc_Ref=SEVD-2020-287-01&p_enDocType=Security+and+Safety+Notice

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.