CVE-2020-7539: schneider-electric 140cpu65150_firmware

Vulnerability summary

CVE-2020-7539 is a high (CVSS 7.5) vulnerability in schneider-electric 140cpu65150_firmware. EPSS estimates a 1.20% chance of exploitation in the next 30 days, higher than 67.6% of scored vulnerabilities.

Timeline

1. 11-12-2020
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause a denial of service vulnerability when a specially crafted packet is sent to the controller over HTTP.

• CWE-754Improper Check for Unusual or Exceptional ConditionsThe product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.