CVE-2018-7242
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks.
Existen algoritmos de hash vulnerables en los controladores Modicon Premium, Modicon Quantum, Modicon M340 y BMXNOR0200, de Schneider Electric, en todas las versiones de los módulos de comunicación. El algoritmo empleado para cifrar la contraseña es vulnerable a ataques de colisión de hash.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-02-19 CVE Reserved
- 2018-04-18 CVE Published
- 2023-12-06 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-326: Inadequate Encryption Strength
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/103543 | Third Party Advisory | |
| https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01 | 2024-04-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schneider-electric Search vendor "Schneider-electric" | Bmxnor0200 Firmware Search vendor "Schneider-electric" for product "Bmxnor0200 Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Bmxnor0200 Search vendor "Schneider-electric" for product "Bmxnor0200" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Bmxnor0200h Firmware Search vendor "Schneider-electric" for product "Bmxnor0200h Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Bmxnor0200h Search vendor "Schneider-electric" for product "Bmxnor0200h" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cpu65150 Firmware Search vendor "Schneider-electric" for product "140cpu65150 Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cpu65150 Search vendor "Schneider-electric" for product "140cpu65150" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cpu31110 Firmware Search vendor "Schneider-electric" for product "140cpu31110 Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cpu31110 Search vendor "Schneider-electric" for product "140cpu31110" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cpu43412u Firmware Search vendor "Schneider-electric" for product "140cpu43412u Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cpu43412u Search vendor "Schneider-electric" for product "140cpu43412u" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cpu65160 Firmware Search vendor "Schneider-electric" for product "140cpu65160 Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cpu65160 Search vendor "Schneider-electric" for product "140cpu65160" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cpu65260 Firmware Search vendor "Schneider-electric" for product "140cpu65260 Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cpu65260 Search vendor "Schneider-electric" for product "140cpu65260" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cpu65860 Firmware Search vendor "Schneider-electric" for product "140cpu65860 Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cpu65860 Search vendor "Schneider-electric" for product "140cpu65860" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cpu65160s Firmware Search vendor "Schneider-electric" for product "140cpu65160s Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cpu65160s Search vendor "Schneider-electric" for product "140cpu65160s" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cpu65150c Firmware Search vendor "Schneider-electric" for product "140cpu65150c Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cpu65150c Search vendor "Schneider-electric" for product "140cpu65150c" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cpu31110c Firmware Search vendor "Schneider-electric" for product "140cpu31110c Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cpu31110c Search vendor "Schneider-electric" for product "140cpu31110c" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cpu43412uc Firmware Search vendor "Schneider-electric" for product "140cpu43412uc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cpu43412uc Search vendor "Schneider-electric" for product "140cpu43412uc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cpu65160c Firmware Search vendor "Schneider-electric" for product "140cpu65160c Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cpu65160c Search vendor "Schneider-electric" for product "140cpu65160c" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cpu65160c Firmware Search vendor "Schneider-electric" for product "140cpu65160c Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cpu65160c Search vendor "Schneider-electric" for product "140cpu65160c" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cpu65260c Firmware Search vendor "Schneider-electric" for product "140cpu65260c Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cpu65260c Search vendor "Schneider-electric" for product "140cpu65260c" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | 140cpu65860c Firmware Search vendor "Schneider-electric" for product "140cpu65860c Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | 140cpu65860c Search vendor "Schneider-electric" for product "140cpu65860c" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp341000 Firmware Search vendor "Schneider-electric" for product "Modicon M340 Bmxp341000 Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp341000 Search vendor "Schneider-electric" for product "Modicon M340 Bmxp341000" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp342000 Firmware Search vendor "Schneider-electric" for product "Modicon M340 Bmxp342000 Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp342000 Search vendor "Schneider-electric" for product "Modicon M340 Bmxp342000" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420102 Firmware Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420102 Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420102 Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420102" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420102cl Firmware Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420102cl Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420102cl Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420102cl" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp342020 Firmware Search vendor "Schneider-electric" for product "Modicon M340 Bmxp342020 Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp342020 Search vendor "Schneider-electric" for product "Modicon M340 Bmxp342020" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420302 Firmware Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420302 Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420302 Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420302" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420302cl Firmware Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420302cl Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420302cl Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420302cl" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420302h Firmware Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420302h Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp3420302h Search vendor "Schneider-electric" for product "Modicon M340 Bmxp3420302h" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp342020h Firmware Search vendor "Schneider-electric" for product "Modicon M340 Bmxp342020h Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp342020h Search vendor "Schneider-electric" for product "Modicon M340 Bmxp342020h" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp341000h Firmware Search vendor "Schneider-electric" for product "Modicon M340 Bmxp341000h Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M340 Bmxp341000h Search vendor "Schneider-electric" for product "Modicon M340 Bmxp341000h" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxh5724m Firmware Search vendor "Schneider-electric" for product "Tsxh5724m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxh5724m Search vendor "Schneider-electric" for product "Tsxh5724m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxh5744m Firmware Search vendor "Schneider-electric" for product "Tsxh5744m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxh5744m Search vendor "Schneider-electric" for product "Tsxh5744m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57104m Firmware Search vendor "Schneider-electric" for product "Tsxp57104m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57104m Search vendor "Schneider-electric" for product "Tsxp57104m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57154m Firmware Search vendor "Schneider-electric" for product "Tsxp57154m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57154m Search vendor "Schneider-electric" for product "Tsxp57154m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp571634m Firmware Search vendor "Schneider-electric" for product "Tsxp571634m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp571634m Search vendor "Schneider-electric" for product "Tsxp571634m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57204m Firmware Search vendor "Schneider-electric" for product "Tsxp57204m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57204m Search vendor "Schneider-electric" for product "Tsxp57204m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57254m Firmware Search vendor "Schneider-electric" for product "Tsxp57254m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57254m Search vendor "Schneider-electric" for product "Tsxp57254m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp572634m Firmware Search vendor "Schneider-electric" for product "Tsxp572634m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp572634m Search vendor "Schneider-electric" for product "Tsxp572634m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57304m Firmware Search vendor "Schneider-electric" for product "Tsxp57304m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57304m Search vendor "Schneider-electric" for product "Tsxp57304m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57354m Firmware Search vendor "Schneider-electric" for product "Tsxp57354m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57354m Search vendor "Schneider-electric" for product "Tsxp57354m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp573634m Firmware Search vendor "Schneider-electric" for product "Tsxp573634m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp573634m Search vendor "Schneider-electric" for product "Tsxp573634m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57454m Firmware Search vendor "Schneider-electric" for product "Tsxp57454m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57454m Search vendor "Schneider-electric" for product "Tsxp57454m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp574634m Firmware Search vendor "Schneider-electric" for product "Tsxp574634m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp574634m Search vendor "Schneider-electric" for product "Tsxp574634m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp575634m Firmware Search vendor "Schneider-electric" for product "Tsxp575634m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp575634m Search vendor "Schneider-electric" for product "Tsxp575634m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp576634m Firmware Search vendor "Schneider-electric" for product "Tsxp576634m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp576634m Search vendor "Schneider-electric" for product "Tsxp576634m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxh5724mc Firmware Search vendor "Schneider-electric" for product "Tsxh5724mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxh5724mc Search vendor "Schneider-electric" for product "Tsxh5724mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxh5744mc Firmware Search vendor "Schneider-electric" for product "Tsxh5744mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxh5744mc Search vendor "Schneider-electric" for product "Tsxh5744mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57104mc Firmware Search vendor "Schneider-electric" for product "Tsxp57104mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57104mc Search vendor "Schneider-electric" for product "Tsxp57104mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57154mc Firmware Search vendor "Schneider-electric" for product "Tsxp57154mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57154mc Search vendor "Schneider-electric" for product "Tsxp57154mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp571634mc Firmware Search vendor "Schneider-electric" for product "Tsxp571634mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp571634mc Search vendor "Schneider-electric" for product "Tsxp571634mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57204mc Firmware Search vendor "Schneider-electric" for product "Tsxp57204mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57204mc Search vendor "Schneider-electric" for product "Tsxp57204mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57254mc Firmware Search vendor "Schneider-electric" for product "Tsxp57254mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57254mc Search vendor "Schneider-electric" for product "Tsxp57254mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp572634mc Firmware Search vendor "Schneider-electric" for product "Tsxp572634mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp572634mc Search vendor "Schneider-electric" for product "Tsxp572634mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57304mc Firmware Search vendor "Schneider-electric" for product "Tsxp57304mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57304mc Search vendor "Schneider-electric" for product "Tsxp57304mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57354mc Firmware Search vendor "Schneider-electric" for product "Tsxp57354mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57354mc Search vendor "Schneider-electric" for product "Tsxp57354mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp573634mc Firmware Search vendor "Schneider-electric" for product "Tsxp573634mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp573634mc Search vendor "Schneider-electric" for product "Tsxp573634mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57454mc Firmware Search vendor "Schneider-electric" for product "Tsxp57454mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57454mc Search vendor "Schneider-electric" for product "Tsxp57454mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp574634mc Firmware Search vendor "Schneider-electric" for product "Tsxp574634mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp574634mc Search vendor "Schneider-electric" for product "Tsxp574634mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57554mc Firmware Search vendor "Schneider-electric" for product "Tsxp57554mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57554mc Search vendor "Schneider-electric" for product "Tsxp57554mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp575634mc Firmware Search vendor "Schneider-electric" for product "Tsxp575634mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp575634mc Search vendor "Schneider-electric" for product "Tsxp575634mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp576634mc Firmware Search vendor "Schneider-electric" for product "Tsxp576634mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp576634mc Search vendor "Schneider-electric" for product "Tsxp576634mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxh5724m Firmware Search vendor "Schneider-electric" for product "Tsxh5724m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxh5724m Search vendor "Schneider-electric" for product "Tsxh5724m" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxh5744mc Firmware Search vendor "Schneider-electric" for product "Tsxh5744mc Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxh5744mc Search vendor "Schneider-electric" for product "Tsxh5744mc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Tsxp57554m Firmware Search vendor "Schneider-electric" for product "Tsxp57554m Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Tsxp57554m Search vendor "Schneider-electric" for product "Tsxp57554m" | - | - |
Safe
|