CVE-2014-0754 Schneider Electric
Remote attackers can access arbitrary resources on Schneider Electric Modicon PLC Ethernet modules via crafted HTTP requests due to a directory traversal flaw.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-0754?
CVE-2014-0754 is a critical path traversal vulnerability in Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges, published on 3 Oct 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.
Weakness: CWE-22
Which versions are affected by CVE-2014-0754?
It affects 43 products.
Products include Schneider-Electric 171ccc96020 Firmware, Schneider-Electric 171ccc96020c Firmware, Schneider-Electric 171ccc96030 Firmware, Schneider-Electric 171ccc96030c Firmware, Schneider-Electric 171ccc98020 Firmware, Schneider-Electric 171ccc98030 Firmware and 37 more.
How do I fix CVE-2014-0754?
No fix has been published for CVE-2014-0754 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2014-0754 being exploited?
There is no known exploitation of CVE-2014-0754 in the wild and no public exploit code.
Sources
Also known as GHSA-9xpp-gwq4-78fj.