CVE-2018-7804
CVE-2018-7804
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
17 Dec 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially crafted link can be redirected to a URL of the attacker's choosing.
Affected products
Schneider Electric SE · Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →