CVE-2018-7831


11/30/2018

CVE-2018-7831

An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to send a specially crafted URL to a currently authenticated web server user to execute a password change on the web server.

References: 
https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/



Don't forget to share

You may also like...

Leave a Reply

Your email address will not be published. Required fields are marked *