CVE-2013-0664
Severity Score
8.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests.
El servicio FactoryCast en los módulos Electric Quantum 140NOE77111 y 140NWM10000, M340 BMXNOE0110x, y Premium TSXETY5103 PLC , permite a usuarios autenticados remotamente el envío de mensajes Modbus, y por consiguiente la ejecución de código arbitrario embebiendo estos mensajes en peticiones SOAP HTTP POST.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-12-19 CVE Reserved
- 2013-04-04 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf | Us Government Resource |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schneider-electric Search vendor "Schneider-electric" | Modicon Quantum Plc Search vendor "Schneider-electric" for product "Modicon Quantum Plc" | 140noe77111 Search vendor "Schneider-electric" for product "Modicon Quantum Plc" and version "140noe77111" | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Quantum Plc Search vendor "Schneider-electric" for product "Modicon Quantum Plc" | 140nwm10000 Search vendor "Schneider-electric" for product "Modicon Quantum Plc" and version "140nwm10000" | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Search vendor "Schneider-electric" for product "Modicon M340" | bmxnoe0110x Search vendor "Schneider-electric" for product "Modicon M340" and version "bmxnoe0110x" | - |
Affected
| ||||||
| Schneider-electric Search vendor "Schneider-electric" | Modicon Premium Search vendor "Schneider-electric" for product "Modicon Premium" | tsxety5103 Search vendor "Schneider-electric" for product "Modicon Premium" and version "tsxety5103" | - |
Affected
| ||||||