cveboard RSS feed

CVE-2018-7831

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2018
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to send a specially crafted URL to a currently authenticated web server user to execute a password change on the web server.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200

Vendor
Schneider Electric SE
Product
Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200
Platforms
Unknown
Default status
Unknown
Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200affectedUnavailableUnavailableUnavailableNone listed