CVE-2018-7240
Estado: ModificadaAlta (8.8)—
A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 3.20%
- Percentil entre todas las CVEs puntuadas: 88
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (13)
Schneider-electric — 140cpu31110 FirmwareSchneider-electric — 140cpu31110c FirmwareSchneider-electric — 140cpu43412u FirmwareSchneider-electric — 140cpu43412uc FirmwareSchneider-electric — 140cpu65150 FirmwareSchneider-electric — 140cpu65150c FirmwareSchneider-electric — 140cpu65160 FirmwareSchneider-electric — 140cpu65160c FirmwareSchneider-electric — 140cpu65160s FirmwareSchneider-electric — 140cpu65260 FirmwareSchneider-electric — 140cpu65260c FirmwareSchneider-electric — 140cpu65860 FirmwareSchneider-electric — 140cpu65860c Firmware
CWE
- CWE-787
Referencias
- http://www.securityfocus.com/bid/103541
- https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01
- https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/
- http://www.securityfocus.com/bid/103541
- https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01
- https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-7240",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 8.8,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "cybersecurity@se.com",
"affectedData": [
{
"vendor": "Schneider Electric SE",
"product": "Modicon Quantum",
"versions": [
{
"status": "affected",
"version": "All versions of Modicon Quantum communication modules"
}
]
}
]
}
],
"published": "2018-04-18T20:29:00.247",
"references": [
{
"url": "http://www.securityfocus.com/bid/103541",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cybersecurity@se.com"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "cybersecurity@se.com"
},
{
"url": "https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/",
"tags": [
"Vendor Advisory"
],
"source": "cybersecurity@se.com"
},
{
"url": "http://www.securityfocus.com/bid/103541",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware."
},
{
"lang": "es",
"value": "Existe una vulnerabilidad en Modicon Quantum, de Schneider Electric, en todas las versiones de los módulos de comunicación que podría permitir la ejecución de código arbitrario. Un comando FTP usado para actualizar el firmware del módulo puede emplearse erróneamente para provocar una denegación de servicio (DoS) o, en casos extremos, cargar un firmware malicioso."
}
],
"lastModified": "2026-06-17T02:02:51.193",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:140cpu65150_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7003BE27-3D26-46F9-BF51-5E026EA2AED6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:140cpu65150:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EC3E5496-C3D0-4DF4-A9AF-F227F889840E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:140cpu31110_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A37B3D0A-D1AA-494F-B26B-70BA8D1E8D6F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:140cpu31110:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F363F812-4BF2-450C-BC40-48A136746B9E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:140cpu43412u_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B36E6DC-D407-4A3B-9ED3-1683EEE83299"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:140cpu43412u:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B87C8629-A8CF-4B8E-AB03-0425C30A40C3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:140cpu65160_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E092BBB-F315-4541-B8B2-BF9E1B75B041"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:140cpu65160:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B2C2AF70-F0BB-4D17-901C-1FCBECDC44FB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:140cpu65260_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D5F2BE6-CF9E-48BB-B525-6B8F4C0B203E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:140cpu65260:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3D7304B0-EE18-454B-B3F0-5EF387285D90"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:140cpu65860_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FECDF56E-7F6B-4048-AAAA-0D80C685F6D9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:140cpu65860:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9B8230FD-0C0A-467C-9BAD-09257739D462"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:140cpu65160s_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "616C2139-6063-4BB1-84C0-AECDBB9EC86C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:140cpu65160s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "95E48F27-F241-4491-AFF7-8BD562F21A52"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:140cpu65150c_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAA5A94A-09A0-4606-8DAE-0CDE1A372483"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:140cpu65150c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "51A2EB59-CCEE-4123-8344-764959B32C3C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:140cpu31110c_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEE31953-8AEA-45AB-81A1-BCE9AC78A48D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:140cpu31110c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "33B887DA-75CD-465C-8B02-4DF1A063F3B9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:140cpu43412uc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09F9986A-4089-429E-BFD7-131C3BE98B9E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:140cpu43412uc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "38AC4E35-E020-4E54-B1F7-01F4A9D9DEC7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:140cpu65160c_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A75F5C8-3341-4C4A-8660-F002AD07702F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:140cpu65160c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D1A9B6A4-BAA6-4982-A27B-2B9D5F0E7178"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:140cpu65160c_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A75F5C8-3341-4C4A-8660-F002AD07702F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:140cpu65160c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D1A9B6A4-BAA6-4982-A27B-2B9D5F0E7178"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:140cpu65260c_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BE1F4A9-D2EA-4A5B-8F9A-EFD961D4F49D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:140cpu65260c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "106C756F-1A0D-486F-BA83-F1F6D9D5661E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:140cpu65860c_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1472068B-ECE2-46F4-AC91-43F5AFCA8C52"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:140cpu65860c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0E33E1CF-BD62-4638-AD44-30A19063FCD5"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cybersecurity@se.com"
}