Arbitrary Code Execution Vulnerability in Schneider Electric's Modicon Quantum Communication Modules

CVE-2018-7240 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.

Learn more about our Cis Benchmark Audit For Suse Linux Enterprise Server.