Riskcovery

CVE-2018-7812

State
Published
Severity
Not scored
Published
Dec 17, 2018
Updated
Aug 5, 2024
Reserved
Mar 8, 2018

Read the record on cve.org

Description

An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where the web server sends different responses in a way that exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200Schneider Electric SE
  • Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.