CVE-2020-7533 Auth bypass in Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see security notification for version information)
Unauthenticated attackers can execute commands on Modicon PLC web servers via crafted HTTP requests, requiring immediate patching for industrial control systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-7533?
CVE-2020-7533 is a critical authentication bypass vulnerability in Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see security notification for version information), published on 1 Dec 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests.
Weakness: CWE-287
Which versions are affected by CVE-2020-7533?
It affects 16 products.
Products include Schneider-Electric 140cpu65260 Firmware, Schneider-Electric 140noc77101 Firmware, Schneider-Electric 140noc78000 Firmware, Schneider-Electric 140noe77111 Firmware, Schneider-Electric Bmxnoc0401 Firmware, Schneider-Electric Bmxnoe0100 Firmware and 10 more.
How do I fix CVE-2020-7533?
No fix has been published for CVE-2020-7533 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2020-7533 being exploited?
There is no known exploitation of CVE-2020-7533 in the wild and no public exploit code.
Sources
Also known as GHSA-4wm4-5vmp-66g7.