CVE-2020-7541CWE-425

A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and…

published December 11, 2020

CVSS
—
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of sensitive data when sending a specially crafted request to the controller over HTTP.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00909 · 59.6th percentile
Weakness
CWE-425 · Direct Request ('Forced Browsing')
Published
2020-12-11T00:52Z
EPSS history
Timeline
  • 11 DEC 00:52Z
    A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and…
    cvelistv5