CVE-2018-7240

A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution

published April 18, 2018

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03201 · 88.0th percentile
Published
2018-04-18T20:00Z
EPSS history
Timeline
  • 18 APR 20:00Z
    A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution
    cvelistv5