CVE-2014-0754 — Schneider Electric

Description (CNA)

Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / Ethernet modules for M340, Quantum and Premium PLC ranges	affected 140CPU65150; affected 140CPU65160; affected 140CPU65260; affected 140NOC77100; affected 140NOC78000; affected 140NOC78100; affected 140NOE77100; affected 140NOE77101; affected 140NOE77101C; affected 140NOE77110; affected 140NOE77111; affected 140NOE77111C; affected 140NWM10000; affected 170ENT11001; affected 170ENT11002; affected 170ENT11002C; affected 171CCC96020; affected 171CCC96020C; affected 171CCC96030; affected 171CCC96030C; affected 171CCC98020; affected 171CCC98030; affected BMXNOC0401; affected BMXNOC0402; affected BMXNOE0100; affected BMXNOE0110; affected BMXNOE0110H; affected BMXNOR0200H; affected BMXP342020; affected BMXP342020H; affected BMXP342030; affected BMXP3420302; affected BMXP3420302H; affected BMXP342030H; affected BMXPRMxxxx; affected STBNIC2212; affected STBNIP2212; affected TSXETC0101; affected TSXETC100; affected TSXETY110WS; affected TSXETY110WSC; affected TSXETY4103; affected TSXETY4103C; affected TSXETY5103; affected TSXETY5103C; affected TSXETZ410; affected TSXETZ510; affected TSXNTP100; affected TSXP572623M; affected TSXP572623MC; affected TSXP572823M; affected TSXP572823MC; affected TSXP573623AM; affected TSXP573623M; affected TSXP573623MC; affected TSXP574634M; affected TSXP574823AM; affected TSXP574823M; affected TSXP574823MC; affected TSXP575634M; affected TSXP576634M; affected TSXWMY100; affected TSXWMY100C; affected TSXP571634M; affected TSXP572634M; affected TSXP573634M

Vendor / product

Versions

Schneider Electric / Ethernet modules for M340, Quantum and Premium PLC ranges

affected 140CPU65150; affected 140CPU65160; affected 140CPU65260; affected 140NOC77100; affected 140NOC78000; affected 140NOC78100; affected 140NOE77100; affected 140NOE77101; affected 140NOE77101C; affected 140NOE77110; affected 140NOE77111; affected 140NOE77111C; affected 140NWM10000; affected 170ENT11001; affected 170ENT11002; affected 170ENT11002C; affected 171CCC96020; affected 171CCC96020C; affected 171CCC96030; affected 171CCC96030C; affected 171CCC98020; affected 171CCC98030; affected BMXNOC0401; affected BMXNOC0402; affected BMXNOE0100; affected BMXNOE0110; affected BMXNOE0110H; affected BMXNOR0200H; affected BMXP342020; affected BMXP342020H; affected BMXP342030; affected BMXP3420302; affected BMXP3420302H; affected BMXP342030H; affected BMXPRMxxxx; affected STBNIC2212; affected STBNIP2212; affected TSXETC0101; affected TSXETC100; affected TSXETY110WS; affected TSXETY110WSC; affected TSXETY4103; affected TSXETY4103C; affected TSXETY5103; affected TSXETY5103C; affected TSXETZ410; affected TSXETZ510; affected TSXNTP100; affected TSXP572623M; affected TSXP572623MC; affected TSXP572823M; affected TSXP572823MC; affected TSXP573623AM; affected TSXP573623M; affected TSXP573623MC; affected TSXP574634M; affected TSXP574823AM; affected TSXP574823M; affected TSXP574823MC; affected TSXP575634M; affected TSXP576634M; affected TSXWMY100; affected TSXWMY100C; affected TSXP571634M; affected TSXP572634M; affected TSXP573634M

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.