What’s Vulnerable › Vulnerabilities

CVE-2018-7241

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-04-18 · updated 2026-06-17
• Weakness: CWE-798

Description

Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.

Affected products

• Schneider-Electric 140Cpu31110 Firmware: all versions
• Schneider-Electric 140Cpu31110C Firmware: all versions
• Schneider-Electric 140Cpu43412U Firmware: all versions
• Schneider-Electric 140Cpu43412Uc Firmware: all versions
• Schneider-Electric 140Cpu65150 Firmware: all versions
• Schneider-Electric 140Cpu65150C Firmware: all versions
• Schneider-Electric 140Cpu65160 Firmware: all versions
• Schneider-Electric 140Cpu65160C Firmware: all versions
• Schneider-Electric 140Cpu65160S Firmware: all versions
• Schneider-Electric 140Cpu65260 Firmware: all versions
• Schneider-Electric 140Cpu65260C Firmware: all versions
• Schneider-Electric 140Cpu65860 Firmware: all versions
• Schneider-Electric 140Cpu65860C Firmware: all versions
• Schneider-Electric Bmxnor0200 Firmware: all versions
• Schneider Electric SE BMXNOR0200H Ethernet / Serial RTU module: all versions
• Schneider-Electric Modicon M340 Bmxp341000 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp341000H Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp342000 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp3420102 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp3420102Cl Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp342020 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp342020H Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp3420302 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp3420302Cl Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp3420302H Firmware: all versions
• Schneider-Electric Tsxh5724M Firmware: all versions
• Schneider-Electric Tsxh5724Mc Firmware: all versions
• Schneider-Electric Tsxh5744M Firmware: all versions
• Schneider-Electric Tsxh5744Mc Firmware: all versions
• Schneider-Electric Tsxp57104M Firmware: all versions

References

• http://www.securityfocus.com/bid/103542
• https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01
• https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/
• http://www.securityfocus.com/bid/103542
• https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01
• https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/

Get alerted when CVE-2018-7241 or the next vulnerability affects your stack