CVE-2015-6461

State: Published
Severity: Not scored
Published: Mar 21, 2019
Updated: Aug 6, 2024
Reserved: Aug 17, 2015

Description

Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will result in the browser redirecting to a remote file via a Java script loaded with the web page.

Scores

The record has no CVSS score.

Weaknesses

CWE-98 Remote file inclusion CWE-98

Affected Products

Product	Versions
Schneider Electric Modicon PLCn/a	BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H.Affected

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.