Description (CNA)
A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schneider Electric / Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions) | affected Modicon Controllers (M340 CPUs; affected M340 communication modules; affected Premium CPUs; affected Premium communication modules; affected Quantum CPUs; affected Quantum communication modules - see security notification for specific versions) |
CWE
CWE-200
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.