CVE-2020-7540
CVE-2020-7540
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 2.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
11 dic 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause unauthenticated command execution in the controller when sending special HTTP requests.
Productos afectados
n/a · Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions)¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →