cveboard RSS feed

CVE-2018-7810

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2018
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to craft a URL containing JavaScript that will be executed within the user's browser, potentially impacting the machine the browser is running on.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200

Vendor
Schneider Electric SE
Product
Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200
Platforms
Unknown
Default status
Unknown
Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200affectedUnavailableUnavailableUnavailableNone listed