CVE-2018-7760 Vulnerability Details

  /     /     /  

CVE-2018-7760 Metadata Quick Info

CVE Published: 18/04/2018 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: schneider | Vendor: Schneider Electric SE | Product: Modicon M340, Modicon Premium, Modicon Quantum, BMXNOR0201
Status : PUBLISHED

---

CVE-2018-7760 Description

An authorization bypass vulnerability exists in Schneider Electric\'s Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Authorization Bypass
Source: Schneider Electric SE

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).