What’s Vulnerable › Vulnerabilities
CVE-2014-0754: Schneider Electric
- Severity: critical (CVSS 10.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 9.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2014-10-03 · updated 2026-06-17
- Weakness: CWE-22
Description
Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.
Affected products
- Schneider-Electric 171Ccc96020 Firmware: all versions
- Schneider-Electric 171Ccc96020C Firmware: all versions
- Schneider-Electric 171Ccc96030 Firmware: all versions
- Schneider-Electric 171Ccc96030C Firmware: all versions
- Schneider-Electric 171Ccc98020 Firmware: all versions
- Schneider-Electric 171Ccc98030 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxnoc0401 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxnoe0100 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxnoe0110 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxnoe0110H Firmware: all versions
- Schneider-Electric Modicon M340 Bmxnor0200H Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp342020 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp342020H Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp3420302 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp3420302H Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp342030 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp342030H Firmware: all versions
- Schneider-Electric Modicon M580 Bmxnoc0402 Firmware: all versions
- Schneider-Electric Stbnic2212 Firmware: all versions
- Schneider-Electric Stbnip2212 Firmware: all versions
- Schneider-Electric Tsxetc0101 Firmware: all versions
- Schneider-Electric Tsxetc100 Firmware: all versions
- Schneider-Electric Tsxety110Ws Firmware: all versions
- Schneider-Electric Tsxety110Wsc Firmware: all versions
- Schneider-Electric Tsxety4103 Firmware: all versions
- Schneider-Electric Tsxety4103C Firmware: all versions
- Schneider-Electric Tsxety5103 Firmware: all versions
- Schneider-Electric Tsxety5103C Firmware: all versions
- Schneider-Electric Tsxetz410 Firmware: all versions
- Schneider-Electric Tsxetz510 Firmware: all versions
References
- http://www.securityfocus.com/bid/70193
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2014-260-01
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-273-01
- http://download.schneider-electric.com/files?p_Reference=SEVD-2014-260-01&p_EnDocType=Software%20-%20Updates&p_File_Id=608959359&p_File_Name=SEVD-2014-260-01.pdf
- http://www.securityfocus.com/bid/70193
- https://ics-cert.us-cert.gov/advisories/ICSA-14-273-01
Get alerted when CVE-2014-0754 or the next vulnerability affects your stack