8.5

CVE-2013-0664

The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Modicon Quantum Plc Version 140noe77111
Schneider-electric ≫ Modicon Quantum Plc Version 140nwm10000
Schneider-electric ≫ Modicon M340 Version bmxnoe0110x
Schneider-electric ≫ Modicon Premium Version tsxety5103
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.91% 0.889
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.5 6.8 10
AV:N/AC:M/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf
US Government Resource
http://www.schneider-electric.com/download/ww/en/details/35081317-Vulnerability-Disclosure-for-Quantum-Premium-and-M340/
Vendor Advisory
http://www.schneider-electric.com/download/ww/en/file/36555639-SEVD-2013-023-01.pdf/?fileName=SEVD-2013-023-01.pdf&reference=SEVD-2013-023-01&docType=Technical-paper
Vendor Advisory