peter bassill · operator
$ cve CVE-2018-7241 JSON

CVE-2018-7241

9.8
CRITICAL · CVSS 3.0 · EPSS 3.7% (pctl 89)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.

Scoring

CVSS9.8 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS3.7% — more likely to be exploited than 89% of all CVEs
WeaknessCWE-798
On CISA KEVno
Public exploitnone known
Published2018-04-18
Last modified2026-06-17

Affected (40)

VendorProduct
schneider-electric140cpu31110
schneider-electric140cpu31110 firmware
schneider-electric140cpu31110c
schneider-electric140cpu31110c firmware
schneider-electric140cpu43412u
schneider-electric140cpu43412u firmware
schneider-electric140cpu43412uc
schneider-electric140cpu43412uc firmware
schneider-electric140cpu65150
schneider-electric140cpu65150 firmware
schneider-electric140cpu65150c
schneider-electric140cpu65150c firmware
schneider-electric140cpu65160
schneider-electric140cpu65160 firmware
schneider-electric140cpu65160c
schneider-electric140cpu65160c firmware
schneider-electric140cpu65160s
schneider-electric140cpu65160s firmware
schneider-electric140cpu65260
schneider-electric140cpu65260 firmware
schneider-electric140cpu65260c
schneider-electric140cpu65260c firmware
schneider-electric140cpu65860
schneider-electric140cpu65860 firmware
schneider-electric140cpu65860c
schneider-electric140cpu65860c firmware
schneider-electricbmxnor0200
schneider-electricbmxnor0200 firmware
schneider-electricbmxnor0200h
schneider-electricbmxnor0200h firmware
schneider-electricmodicon m340 bmxp341000
schneider-electricmodicon m340 bmxp341000 firmware
schneider-electricmodicon m340 bmxp342000
schneider-electricmodicon m340 bmxp342000 firmware
schneider-electricmodicon m340 bmxp3420102
schneider-electricmodicon m340 bmxp3420102 firmware
schneider-electricmodicon m340 bmxp3420102cl
schneider-electricmodicon m340 bmxp3420102cl firmware
schneider-electricmodicon m340 bmxp342020
schneider-electricmodicon m340 bmxp342020 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD