What’s Vulnerable › Vulnerabilities

CVE-2018-7760

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-04-18 · updated 2026-06-17
• Weakness: CWE-287

Description

An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization.

Affected products

• Schneider-Electric 140Cpu31110 Firmware: all versions
• Schneider-Electric 140Cpu31110C Firmware: all versions
• Schneider-Electric 140Cpu43412U Firmware: all versions
• Schneider-Electric 140Cpu43412Uc Firmware: all versions
• Schneider-Electric 140Cpu65150 Firmware: all versions
• Schneider-Electric 140Cpu65150C Firmware: all versions
• Schneider-Electric 140Cpu65160 Firmware: all versions
• Schneider-Electric 140Cpu65160C Firmware: all versions
• Schneider-Electric 140Cpu65160S Firmware: all versions
• Schneider-Electric 140Cpu65260 Firmware: all versions
• Schneider-Electric 140Cpu65260C Firmware: all versions
• Schneider-Electric 140Cpu65860 Firmware: all versions
• Schneider-Electric 140Cpu65860C Firmware: all versions
• Schneider-Electric Bmxnor0200 Firmware: all versions
• Schneider Electric SE BMXNOR0200H Ethernet / Serial RTU module: all versions
• Schneider-Electric Modicon M340 Bmxp341000 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp341000H Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp342000 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp3420102 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp3420102Cl Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp342020 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp342020H Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp3420302 Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp3420302Cl Firmware: all versions
• Schneider-Electric Modicon M340 Bmxp3420302H Firmware: all versions
• Schneider-Electric Tsxh5724M Firmware: all versions
• Schneider-Electric Tsxh5724Mc Firmware: all versions
• Schneider-Electric Tsxh5744M Firmware: all versions
• Schneider-Electric Tsxh5744Mc Firmware: all versions
• Schneider-Electric Tsxp57104M Firmware: all versions

References

• https://www.schneider-electric.com/en/download/document/SEVD-2018-081-02/
• https://www.schneider-electric.com/en/download/document/SEVD-2018-081-02/

Get alerted when CVE-2018-7760 or the next vulnerability affects your stack