CVE-2020-7562

Published Nov 18, 2020 CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Description
A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2020-28687 A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.
History
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H'}

Subscriptions

Schneider-electric Modicon M340 Bmx Noc 0401 Modicon M340 Bmx Noc 0401 Firmware Modicon M340 Bmx Noe 0100 Modicon M340 Bmx Noe 0100 Firmware Modicon M340 Bmx Noe 0100h Modicon M340 Bmx Noe 0100h Firmware Modicon M340 Bmx Noe 0110 Modicon M340 Bmx Noe 0110 Firmware Modicon M340 Bmx Noe 0110h Modicon M340 Bmx Noe 0110h Firmware Modicon M340 Bmx Nor 0200h Modicon M340 Bmx Nor 0200h Firmware Modicon M340 Bmx P34-2010 Modicon M340 Bmx P34-2010 Firmware Modicon M340 Bmx P34-2030 Modicon M340 Bmx P34-2030 Firmware Modicon Quantum 140cpu65150 Modicon Quantum 140cpu65150 Firmware Modicon Quantum 140cpu65150c Modicon Quantum 140cpu65150c Firmware Modicon Quantum 140cpu65160 Modicon Quantum 140cpu65160 Firmware Modicon Quantum 140cpu65160c Modicon Quantum 140cpu65160c Firmware Modicon Quantum 140noc78100 Modicon Quantum 140noc78100 Firmware Modicon Quantum 140noe77101 Modicon Quantum 140noe77101 Firmware Modicon Quantum 140noe77111 Modicon Quantum 140noe77111 Firmware Modicon Tsxety4103 Modicon Tsxety4103 Firmware Modicon Tsxety5103 Modicon Tsxety5103 Firmware Modicon Tsxp574634 Modicon Tsxp574634 Firmware Modicon Tsxp575634 Modicon Tsxp575634 Firmware Modicon Tsxp576634 Modicon Tsxp576634 Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
schneider
Published
Updated
May 29, 2026, 1:21 PM
Reserved
Jan 21, 2020, 12:00 AM
Status
Modified
Published
Nov 18, 2020, 2:15 PM
Modified
Jun 17, 2026, 3:25 AM