CVE-2014-0754

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 03-10-2014 08:55

Last modified: - 10-02-2022 08:50

Total changes: - 2

Description

Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:C/I:C/A:C

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Privileges required

Scope

User interaction

10.0

Base score

10.0

Exploitability score

Impact score

Verification logic

AND

vendor=schneider-electric AND product=stbnic2212_firmware AND version=-

vendor=schneider-electric AND product=stbnic2212 AND version=-

AND

vendor=schneider-electric AND product=stbnip2212_firmware AND version=-

vendor=schneider-electric AND product=stbnip2212 AND version=-

AND

vendor=schneider-electric AND product=tsxetc0101_firmware AND version=-

vendor=schneider-electric AND product=tsxetc0101 AND version=-

AND

vendor=schneider-electric AND product=tsxetc100_firmware AND version=-

vendor=schneider-electric AND product=tsxetc100 AND version=-

AND

vendor=schneider-electric AND product=tsxp573623mc_firmware AND version=-

vendor=schneider-electric AND product=tsxp573623mc AND version=-

AND

vendor=schneider-electric AND product=tsxety110ws_firmware AND version=-

vendor=schneider-electric AND product=tsxety110ws AND version=-

AND

vendor=schneider-electric AND product=tsxp574634m_firmware AND version=-

vendor=schneider-electric AND product=tsxp574634m AND version=-

AND

vendor=schneider-electric AND product=tsxety110wsc_firmware AND version=-

vendor=schneider-electric AND product=tsxety110wsc AND version=-

AND

vendor=schneider-electric AND product=tsxp574823am_firmware AND version=-

vendor=schneider-electric AND product=tsxp574823am AND version=-

AND

vendor=schneider-electric AND product=tsxety4103_firmware AND version=-

vendor=schneider-electric AND product=tsxety4103 AND version=-

AND

vendor=schneider-electric AND product=tsxp574823m_firmware AND version=-

vendor=schneider-electric AND product=tsxp574823m AND version=-

AND

vendor=schneider-electric AND product=tsxety4103c_firmware AND version=-

vendor=schneider-electric AND product=tsxety4103c AND version=-

AND

vendor=schneider-electric AND product=tsxp574823mc_firmware AND version=-

vendor=schneider-electric AND product=tsxp574823mc AND version=-

AND

vendor=schneider-electric AND product=tsxety5103_firmware AND version=-

vendor=schneider-electric AND product=tsxety5103 AND version=-

AND

vendor=schneider-electric AND product=tsxp575634m_firmware AND version=-

vendor=schneider-electric AND product=tsxp575634m AND version=-

AND

vendor=schneider-electric AND product=tsxety5103c_firmware AND version=-

vendor=schneider-electric AND product=tsxety5103c AND version=-

AND

vendor=schneider-electric AND product=tsxp576634m_firmware AND version=-

vendor=schneider-electric AND product=tsxp576634m AND version=-

AND

vendor=schneider-electric AND product=tsxetz410_firmware AND version=-

vendor=schneider-electric AND product=tsxetz410 AND version=-

AND

vendor=schneider-electric AND product=tsxwmy100_firmware AND version=-

vendor=schneider-electric AND product=tsxwmy100 AND version=-

AND

vendor=schneider-electric AND product=tsxetz510_firmware AND version=-

vendor=schneider-electric AND product=tsxetz510 AND version=-

AND

vendor=schneider-electric AND product=tsxwmy100c_firmware AND version=-

vendor=schneider-electric AND product=tsxwmy100c AND version=-

AND

vendor=schneider-electric AND product=tsxntp100_firmware AND version=-

vendor=schneider-electric AND product=tsxntp100 AND version=-

AND

vendor=schneider-electric AND product=modicon_m580_bmxnoc0402_firmware AND version=-

vendor=schneider-electric AND product=modicon_m580_bmxnoc0402 AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxnoe0100_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxnoe0100 AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxnoe0110_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxnoe0110 AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxnoe0110h_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxnoe0110h AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxnor0200h_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxnor0200h AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxp342020_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxp342020 AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxp342020h_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxp342020h AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxp342030_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxp342030 AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxp3420302_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxp3420302 AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxp3420302h_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxp3420302h AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxp342030h_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxp342030h AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxnoc0401_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxnoc0401 AND version=-

AND

vendor=schneider-electric AND product=171ccc96020_firmware AND version=-

vendor=schneider-electric AND product=171ccc96020 AND version=-

AND

vendor=schneider-electric AND product=171ccc96020c_firmware AND version=-

vendor=schneider-electric AND product=171ccc96020c AND version=-

AND

vendor=schneider-electric AND product=171ccc96030_firmware AND version=-

vendor=schneider-electric AND product=171ccc96030 AND version=-

AND

vendor=schneider-electric AND product=171ccc96030c_firmware AND version=-

vendor=schneider-electric AND product=171ccc96030c AND version=-

AND

vendor=schneider-electric AND product=171ccc98020_firmware AND version=-

vendor=schneider-electric AND product=171ccc98020 AND version=-

AND

vendor=schneider-electric AND product=171ccc98030_firmware AND version=-

vendor=schneider-electric AND product=171ccc98030 AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxnoc0401_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxnoc0401 AND version=-

AND

vendor=schneider-electric AND product=modicon_m580_bmxnoc0402_firmware AND version=-

vendor=schneider-electric AND product=modicon_m580_bmxnoc0402 AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxnoe0110_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxnoe0110 AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxnoe0110h_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxnoe0110h AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxnor0200h_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxnor0200h AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxp342020_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxp342020 AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxp342020h_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxp342020h AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxp3420302_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxp3420302 AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxp342030_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxp342030 AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxp3420302h_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxp3420302h AND version=-

AND

vendor=schneider-electric AND product=modicon_m340_bmxp342030h_firmware AND version=-

vendor=schneider-electric AND product=modicon_m340_bmxp342030h AND version=-

AND

vendor=schneider-electric AND product=tsxetc100_firmware AND version=-

vendor=schneider-electric AND product=tsxetc100 AND version=-

AND

vendor=schneider-electric AND product=tsxp573623mc_firmware AND version=-

vendor=schneider-electric AND product=tsxp573623mc AND version=-

AND

vendor=schneider-electric AND product=tsxety110ws_firmware AND version=-

vendor=schneider-electric AND product=tsxety110ws AND version=-

AND

vendor=schneider-electric AND product=tsxp574634m_firmware AND version=-

vendor=schneider-electric AND product=tsxp574634m AND version=-

AND

vendor=schneider-electric AND product=tsxety110wsc_firmware AND version=-

vendor=schneider-electric AND product=tsxety110wsc AND version=-

AND

vendor=schneider-electric AND product=tsxp574823am_firmware AND version=-

vendor=schneider-electric AND product=tsxp574823am AND version=-

AND

vendor=schneider-electric AND product=tsxety4103_firmware AND version=-

vendor=schneider-electric AND product=tsxety4103 AND version=-

AND

vendor=schneider-electric AND product=tsxp574823m_firmware AND version=-

vendor=schneider-electric AND product=tsxp574823m AND version=-

AND

vendor=schneider-electric AND product=tsxety4103c_firmware AND version=-

vendor=schneider-electric AND product=tsxety4103c AND version=-

AND

vendor=schneider-electric AND product=tsxp574823mc_firmware AND version=-

vendor=schneider-electric AND product=tsxp574823mc AND version=-

AND

vendor=schneider-electric AND product=tsxety5103_firmware AND version=-

vendor=schneider-electric AND product=tsxety5103 AND version=-

AND

vendor=schneider-electric AND product=tsxp575634m_firmware AND version=-

vendor=schneider-electric AND product=tsxp575634m AND version=-

AND

vendor=schneider-electric AND product=tsxety5103c_firmware AND version=-

vendor=schneider-electric AND product=tsxety5103c AND version=-

AND

vendor=schneider-electric AND product=tsxp576634m_firmware AND version=-

vendor=schneider-electric AND product=tsxp576634m AND version=-

AND

vendor=schneider-electric AND product=tsxetz410_firmware AND version=-

vendor=schneider-electric AND product=tsxetz410 AND version=-

AND

vendor=schneider-electric AND product=tsxwmy100_firmware AND version=-

vendor=schneider-electric AND product=tsxwmy100 AND version=-

AND

vendor=schneider-electric AND product=tsxetz510_firmware AND version=-

vendor=schneider-electric AND product=tsxetz510 AND version=-

AND

vendor=schneider-electric AND product=tsxwmy100c_firmware AND version=-

vendor=schneider-electric AND product=tsxwmy100c AND version=-

AND

vendor=schneider-electric AND product=tsxntp100_firmware AND version=-

vendor=schneider-electric AND product=tsxntp100 AND version=-

AND

vendor=schneider-electric AND product=tsxp571634m_firmware AND version=-

vendor=schneider-electric AND product=tsxp571634m AND version=-

AND

vendor=schneider-electric AND product=tsxp572634m_firmware AND version=-

vendor=schneider-electric AND product=tsxp572634m AND version=-

AND

vendor=schneider-electric AND product=tsxp573634m_firmware AND version=-

vendor=schneider-electric AND product=tsxp573634m AND version=-

Reference

Keywords

CVE-2014-0754

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2014-0754

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures