CVE-2020-7563

schneider-electric modicon tsxety4103 firmware, schneider-electric modicon tsxety5103 firmware, schneider-electric modicon tsxp574634 firmware +17 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-7563

Katalog CVE

CVSS 8.8 · High EPSS 1,1%

Kerentanan Out-of-bounds Write pada schneider-electric modicon tsxety4103 firmware, schneider-electric modicon tsxety5103 firmware +18 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.

Rincian

Terbit di NVD
18 November 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-787: Out-of-bounds Write
EPSS (30 hari)
1,1% peluang dieksploitasi; lebih tinggi dari 65,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
schneider-electric modicon tsxety4103 firmware Semua versi
schneider-electric modicon tsxety5103 firmware Semua versi
schneider-electric modicon tsxp574634 firmware Semua versi
schneider-electric modicon tsxp575634 firmware Semua versi
schneider-electric modicon tsxp576634 firmware Semua versi
schneider-electric modicon quantum 140noe77101 firmware Semua versi
schneider-electric modicon quantum 140noe77111 firmware Semua versi
schneider-electric modicon quantum 140noc78100 firmware Semua versi
schneider-electric modicon quantum 140cpu65150 firmware Semua versi
schneider-electric modicon quantum 140cpu65150c firmware Semua versi
schneider-electric modicon quantum 140cpu65160c firmware Semua versi
schneider-electric modicon quantum 140cpu65160 firmware Semua versi
schneider-electric modicon m340 bmx p34-2010 firmware Semua versi
schneider-electric modicon m340 bmx p34-2030 firmware Semua versi
schneider-electric modicon m340 bmx noc 0401 firmware Semua versi
schneider-electric modicon m340 bmx noe 0100 firmware Semua versi
schneider-electric modicon m340 bmx noe 0100h firmware Semua versi
schneider-electric modicon m340 bmx noe 0110 firmware Semua versi
schneider-electric modicon m340 bmx noe 0110h firmware Semua versi
schneider-electric modicon m340 bmx nor 0200h firmware Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.