CVE-2018-7831

CVE-2018-7831: falha em Schneider Electric SE Embedded Web Servers in…

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.6%
An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to send a specially crafted URL to a currently authenticated web server user to execute a password change on the web server.
Produtos afetados
Schneider Electric SE · Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200
CVEs relacionadas — Schneider Electric SE Embedded Web Servers in…

No mesmo produto, das mais perigosas para as menos.

CVE-2018-7812—CVE-2018-7812EPSS 3.7%CVE-2018-7811—CVE-2018-7811EPSS 3.5%CVE-2018-7809—CVE-2018-7809EPSS 2.5%CVE-2018-7830—CVE-2018-7830EPSS 2.4%CVE-2018-7833—CVE-2018-7833EPSS 1.4%CVE-2018-7810—CVE-2018-7810EPSS 0.9%