What’s Vulnerable › Vulnerabilities
CVE-2018-7242
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-04-18 · updated 2026-06-17
- Weakness: CWE-326
Description
Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.
Affected products
- Schneider-Electric 140Cpu31110 Firmware: all versions
- Schneider-Electric 140Cpu31110C Firmware: all versions
- Schneider-Electric 140Cpu43412U Firmware: all versions
- Schneider-Electric 140Cpu43412Uc Firmware: all versions
- Schneider-Electric 140Cpu65150 Firmware: all versions
- Schneider-Electric 140Cpu65150C Firmware: all versions
- Schneider-Electric 140Cpu65160 Firmware: all versions
- Schneider-Electric 140Cpu65160C Firmware: all versions
- Schneider-Electric 140Cpu65160S Firmware: all versions
- Schneider-Electric 140Cpu65260 Firmware: all versions
- Schneider-Electric 140Cpu65260C Firmware: all versions
- Schneider-Electric 140Cpu65860 Firmware: all versions
- Schneider-Electric 140Cpu65860C Firmware: all versions
- Schneider-Electric Bmxnor0200 Firmware: all versions
- Schneider Electric SE BMXNOR0200H Ethernet / Serial RTU module: all versions
- Schneider-Electric Modicon M340 Bmxp341000 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp341000H Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp342000 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp3420102 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp3420102Cl Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp342020 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp342020H Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp3420302 Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp3420302Cl Firmware: all versions
- Schneider-Electric Modicon M340 Bmxp3420302H Firmware: all versions
- Schneider-Electric Tsxh5724M Firmware: all versions
- Schneider-Electric Tsxh5724Mc Firmware: all versions
- Schneider-Electric Tsxh5744M Firmware: all versions
- Schneider-Electric Tsxh5744Mc Firmware: all versions
- Schneider-Electric Tsxp57104M Firmware: all versions
References
- http://www.securityfocus.com/bid/103543
- https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01
- https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/
- http://www.securityfocus.com/bid/103543
- https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01
- https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/
Get alerted when CVE-2018-7242 or the next vulnerability affects your stack