« Volver al listado

CVE-2011-4861

Estado: ModificadaAlta (10)—

The modbus_125_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) allows remote attackers to install arbitrary firmware updates via a MODBUS 125 function code to TCP port 502.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Schneider-electric — Quantum Ethernet Module 140noe77100Schneider-electric — Quantum Ethernet Module 140noe77101Schneider-electric — Quantum Ethernet Module 140noe77111

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-4861",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-12-17T11:55:12.370",
  "references": [
    {
      "url": "http://reversemode.com/index.php?option=com_content&task=view&id=80&Itemid=1",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://reversemode.com/index.php?option=com_content&task=view&id=80&Itemid=1",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The modbus_125_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) allows remote attackers to install arbitrary firmware updates via a MODBUS 125 function code to TCP port 502."
    },
    {
      "lang": "es",
      "value": "La función modbus_125_handler del módulo Schneider Electric Quantum Ethernet del dispositivo NOE 771 (módulo Quantum 140NOE771*) permite a atacantes remotos instalar actualizaciones de firmware arbitrarias a través de un código de función MODBUS 125 al puerto TCP 502."
    }
  ],
  "lastModified": "2026-06-16T23:35:31.733",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:schneider-electric:quantum_ethernet_module_140noe77100:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E2B9B12-772E-45B0-B696-9487C5EC9669",
              "versionEndIncluding": "3.3"
            },
            {
              "criteria": "cpe:2.3:a:schneider-electric:quantum_ethernet_module_140noe77100:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84E9206F-0AED-4C42-849E-F8741C070234",
              "versionEndIncluding": "3.4"
            },
            {
              "criteria": "cpe:2.3:a:schneider-electric:quantum_ethernet_module_140noe77101:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6272D36-A9E3-4210-8998-19D65323E085",
              "versionEndIncluding": "4.9"
            },
            {
              "criteria": "cpe:2.3:a:schneider-electric:quantum_ethernet_module_140noe77111:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0780C449-C9A7-4D83-9090-C48EB308F69F",
              "versionEndIncluding": "5.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}