CVSS 3.1
8.1 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HCVE-2020-7562
High (8.1) in schneider-electric. EPSS 0.9% chance of exploitation in the next 30 days.
A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
- CWE
- CWE-125
- Published
- Modified
- Record from
- the NVD, synced
Affected
- schneider-electric:modicon_m340_bmx_noc_0401_firmware
- schneider-electric:modicon_m340_bmx_noe_0100_firmware
- schneider-electric:modicon_m340_bmx_noe_0100h_firmware
- schneider-electric:modicon_m340_bmx_noe_0110_firmware
- schneider-electric:modicon_m340_bmx_noe_0110h_firmware
- schneider-electric:modicon_m340_bmx_nor_0200h_firmware
- schneider-electric:modicon_m340_bmx_p34-2010_firmware
- schneider-electric:modicon_m340_bmx_p34-2030_firmware
- schneider-electric:modicon_quantum_140cpu65150_firmware
- schneider-electric:modicon_quantum_140cpu65150c_firmware
- schneider-electric:modicon_quantum_140cpu65160_firmware
- schneider-electric:modicon_quantum_140cpu65160c_firmware
- schneider-electric:modicon_quantum_140noc78100_firmware
- schneider-electric:modicon_quantum_140noe77101_firmware
- schneider-electric:modicon_quantum_140noe77111_firmware
- schneider-electric:modicon_tsxety4103_firmware
- schneider-electric:modicon_tsxety5103_firmware
- schneider-electric:modicon_tsxp574634_firmware
- schneider-electric:modicon_tsxp575634_firmware
- schneider-electric:modicon_tsxp576634_firmware