CVE-2018-7833

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-12-17 · updated 2026-06-17
Weakness: CWE-754

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable

Affected products

Schneider-Electric Modicom Bmxnor0200H Firmware: all versions
Schneider-Electric Modicom M340 Firmware: all versions
Schneider-Electric Modicom Premium Firmware: all versions
Schneider-Electric Modicom Quantum Firmware: all versions

References

https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/

Get alerted when CVE-2018-7833 or the next vulnerability affects your stack