CVE-2020-7562CWE-125

A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication…

Medium · published November 18, 2020

CVSS v3.1
6.3
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00902 · 59.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2020-11-18T13:54Z
EPSS history
Timeline
  • 18 NOV 13:54Z
    A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication…
    cvelistv5