複数の Schneider Electric 製品におけるハードコードされた認証情報の使用に関する脆弱性
| Title |
複数の Schneider Electric 製品におけるハードコードされた認証情報の使用に関する脆弱性
|
| Summary |
複数の Schneider Electric 製品には、ハードコードされた認証情報の使用に関する脆弱性が存在します。
|
| Possible impacts |
情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。 |
| Solution |
ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date |
March 22, 2018, midnight |
| Registration Date |
June 15, 2018, 6:04 p.m. |
| Last Update |
July 4, 2018, 3:21 p.m. |
|
CVSS3.0 : 緊急
|
| Score |
9.8
|
| Vector |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
CVSS2.0 : 危険
|
| Score |
10
|
| Vector |
AV:N/AC:L/Au:N/C:C/I:C/A:C |
Affected System
| Schneider Electric |
|
BMXNOR0200
|
|
Schneider Electric Modicon M340 PAC
|
|
Schneider Electric Modicon Premium PLC
|
|
Schneider Electric Modicon Quantum PLC
|
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
その他
Change Log
| No |
Changed Details |
Date of change |
| 1 |
[2018年06月15日]
掲載 |
June 15, 2018, 6:04 p.m. |
| 2 |
[2018年07月04日]
参考情報：ICS-CERT ADVISORY (ICSA-18-086-01) を追加 |
July 4, 2018, 3:17 p.m. |
NVD Vulnerability Information
CVE-2018-7241
| Summary |
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.
|
| Publication Date |
April 19, 2018, 5:29 a.m. |
| Registration Date |
March 1, 2021, 7:37 p.m. |
| Last Update |
Nov. 21, 2024, 1:11 p.m. |
Affected software configurations
| Configuration1 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:bmxnor0200_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:bmxnor0200:-:*:*:*:*:*:*:* |
| Configuration2 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:bmxnor0200h_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:bmxnor0200h:-:*:*:*:*:*:*:* |
| Configuration3 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:140cpu65150_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:140cpu65150:-:*:*:*:*:*:*:* |
| Configuration4 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:140cpu31110_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:140cpu31110:-:*:*:*:*:*:*:* |
| Configuration5 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:140cpu43412u_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:140cpu43412u:-:*:*:*:*:*:*:* |
| Configuration6 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:140cpu65160_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:140cpu65160:-:*:*:*:*:*:*:* |
| Configuration7 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:140cpu65260_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:140cpu65260:-:*:*:*:*:*:*:* |
| Configuration8 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:140cpu65860_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:140cpu65860:-:*:*:*:*:*:*:* |
| Configuration9 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:140cpu65160s_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:140cpu65160s:-:*:*:*:*:*:*:* |
| Configuration10 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:140cpu65150c_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:140cpu65150c:-:*:*:*:*:*:*:* |
| Configuration11 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:140cpu31110c_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:140cpu31110c:-:*:*:*:*:*:*:* |
| Configuration12 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:140cpu43412uc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:140cpu43412uc:-:*:*:*:*:*:*:* |
| Configuration13 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:140cpu65160c_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:140cpu65160c:-:*:*:*:*:*:*:* |
| Configuration14 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:140cpu65160c_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:140cpu65160c:-:*:*:*:*:*:*:* |
| Configuration15 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:140cpu65260c_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:140cpu65260c:-:*:*:*:*:*:*:* |
| Configuration16 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:140cpu65860c_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:140cpu65860c:-:*:*:*:*:*:*:* |
| Configuration17 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:-:*:*:*:*:*:*:* |
| Configuration18 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:modicon_m340_bmxp342000:-:*:*:*:*:*:*:* |
| Configuration19 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420102:-:*:*:*:*:*:*:* |
| Configuration20 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102cl_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420102cl:-:*:*:*:*:*:*:* |
| Configuration21 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:*:*:*:*:*:*:* |
| Configuration22 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302:-:*:*:*:*:*:*:* |
| Configuration23 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302cl_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302cl:-:*:*:*:*:*:*:* |
| Configuration24 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302h_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302h:-:*:*:*:*:*:*:* |
| Configuration25 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020h_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020h:-:*:*:*:*:*:*:* |
| Configuration26 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000h_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000h:-:*:*:*:*:*:*:* |
| Configuration27 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxh5724m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxh5724m:-:*:*:*:*:*:*:* |
| Configuration28 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxh5744m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxh5744m:-:*:*:*:*:*:*:* |
| Configuration29 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57104m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57104m:-:*:*:*:*:*:*:* |
| Configuration30 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57154m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57154m:-:*:*:*:*:*:*:* |
| Configuration31 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp571634m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp571634m:-:*:*:*:*:*:*:* |
| Configuration32 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57204m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57204m:-:*:*:*:*:*:*:* |
| Configuration33 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57254m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57254m:-:*:*:*:*:*:*:* |
| Configuration34 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp572634m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp572634m:-:*:*:*:*:*:*:* |
| Configuration35 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57304m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57304m:-:*:*:*:*:*:*:* |
| Configuration36 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57354m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57354m:-:*:*:*:*:*:*:* |
| Configuration37 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp573634m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp573634m:-:*:*:*:*:*:*:* |
| Configuration38 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57454m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57454m:-:*:*:*:*:*:*:* |
| Configuration39 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp574634m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp574634m:-:*:*:*:*:*:*:* |
| Configuration40 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp575634m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp575634m:-:*:*:*:*:*:*:* |
| Configuration41 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp576634m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp576634m:-:*:*:*:*:*:*:* |
| Configuration42 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxh5724mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxh5724mc:-:*:*:*:*:*:*:* |
| Configuration43 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxh5744mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxh5744mc:-:*:*:*:*:*:*:* |
| Configuration44 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57104mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57104mc:-:*:*:*:*:*:*:* |
| Configuration45 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57154mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57154mc:-:*:*:*:*:*:*:* |
| Configuration46 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp571634mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp571634mc:-:*:*:*:*:*:*:* |
| Configuration47 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57204mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57204mc:-:*:*:*:*:*:*:* |
| Configuration48 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57254mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57254mc:-:*:*:*:*:*:*:* |
| Configuration49 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp572634mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp572634mc:-:*:*:*:*:*:*:* |
| Configuration50 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57304mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57304mc:-:*:*:*:*:*:*:* |
| Configuration51 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57354mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57354mc:-:*:*:*:*:*:*:* |
| Configuration52 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp573634mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp573634mc:-:*:*:*:*:*:*:* |
| Configuration53 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57454mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57454mc:-:*:*:*:*:*:*:* |
| Configuration54 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp574634mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp574634mc:-:*:*:*:*:*:*:* |
| Configuration55 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57554mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57554mc:-:*:*:*:*:*:*:* |
| Configuration56 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp575634mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp575634mc:-:*:*:*:*:*:*:* |
| Configuration57 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp576634mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp576634mc:-:*:*:*:*:*:*:* |
| Configuration58 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxh5724m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxh5724m:-:*:*:*:*:*:*:* |
| Configuration59 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxh5744mc_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxh5744mc:-:*:*:*:*:*:*:* |
| Configuration60 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:schneider-electric:tsxp57554m_firmware:-:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:h:schneider-electric:tsxp57554m:-:*:*:*:*:*:*:* |
Related information, measures and tools
Common Vulnerabilities List