variot - var-201410-1134

var-201410-1134

Vulnerability from variot

Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request. Schneider Electric provides products and services in the areas of energy and infrastructure, industry, data centers and networks, buildings and residential. Exploiting this issue can allow an attacker to gain access to arbitrary files. Information harvested may aid in launching further attacks. Schneider Electric Modicon PLC Ethernet is an Ethernet programmable controller produced by French Schneider Electric (Schneider Electric). The following versions are affected: Schneider Electric Modicon PLC Ethernet modules 140CPU65x Version, 140NOC78x Version, 140NOE77x Version, BMXNOC0401 Version, BMXNOC0402 Version, BMXNOE0100 Version, BMXNOE0110x Version, TSXETC101 Version, TSXETC0101 Version, TSXETY4103x Version, TSXETY5103x Version, TSXP57x Version, TSXP57x Version

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201410-1134",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "modicon m340 bmxp342030h",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxp575634m",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxp574823am",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "modicon m340 bmxnoe0110h",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxety4103c",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxntp100",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxp574823m",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "modicon m340 bmxnoe0110",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "modicon m340 bmxnoc0401",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxety5103c",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxp573634m",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "171ccc96020",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "modicon m340 bmxp342020h",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxp571634m",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "stbnic2212",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "modicon m340 bmxp3420302h",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "171ccc98020",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxwmy100",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxetc0101",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "stbnip2212",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "171ccc96020c",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxp574634m",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxetz510",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "modicon m340 bmxp342030",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "modicon m340 bmxp3420302",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxetz410",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "modicon m340 bmxp342020",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxety110wsc",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxp573623mc",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxety110ws",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxety4103",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "modicon m340 bmxnoe0100",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "171ccc98030",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxety5103",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxwmy100c",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "modicon m580 bmxnoc0402",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxetc100",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "171ccc96030c",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxp572634m",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "modicon m340 bmxnor0200h",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxp576634m",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "tsxp574823mc",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "171ccc96030",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "schneider electric",
        "version": null
      },
      {
        "model": "modicon plc ethernet communication module",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "schneider electric",
        "version": "140cpu65x exec 5.5"
      },
      {
        "model": "modicon plc ethernet communication module",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "schneider electric",
        "version": "140noc78x exec 1.62"
      },
      {
        "model": "modicon plc ethernet communication module",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "schneider electric",
        "version": "140noe77x exec 6.2"
      },
      {
        "model": "modicon plc ethernet communication module",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "schneider electric",
        "version": "bmxnoc0401 2.05"
      },
      {
        "model": "modicon plc ethernet communication module",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "schneider electric",
        "version": "bmxnoe0100 2.9"
      },
      {
        "model": "modicon plc ethernet communication module",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "schneider electric",
        "version": "bmxnoe0110x exec 6.0"
      },
      {
        "model": "modicon plc ethernet communication module",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "schneider electric",
        "version": "tsxetc101 exec 2.04"
      },
      {
        "model": "modicon plc ethernet communication module",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "schneider electric",
        "version": "tsxety4103x exec 5.7"
      },
      {
        "model": "modicon plc ethernet communication module",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "schneider electric",
        "version": "tsxety5103x exec 5.9"
      },
      {
        "model": "modicon plc ethernet communication module",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "schneider electric",
        "version": "tsxp57x ethernet copro exec 5.5"
      },
      {
        "model": "modicon plc ethernet communication module",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "schneider electric",
        "version": "tsxp57x etyport exec 5.7"
      },
      {
        "model": "electric modicon plc ethernet module",
        "scope": null,
        "trust": 0.6,
        "vendor": "schneider",
        "version": null
      },
      {
        "model": "modicon plc ethernet module",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "schneider electric",
        "version": "bmxp3420302h"
      },
      {
        "model": "modicon plc ethernet module",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "schneider electric",
        "version": "bmxp342030h"
      },
      {
        "model": "modicon plc ethernet module",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "schneider electric",
        "version": "tsxp573634m"
      },
      {
        "model": "modicon plc ethernet module",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "schneider electric",
        "version": "140cpu65160"
      },
      {
        "model": "modicon plc ethernet module",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "schneider electric",
        "version": "tsxp572623mc"
      },
      {
        "model": "modicon plc ethernet module",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "schneider electric",
        "version": "tsxp572623m"
      },
      {
        "model": "modicon plc ethernet module",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "schneider electric",
        "version": "140cpu65150"
      },
      {
        "model": "modicon plc ethernet module",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "schneider electric",
        "version": "171ccc96020"
      },
      {
        "model": "modicon plc ethernet module",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "schneider electric",
        "version": "140cpu65260"
      },
      {
        "model": "modicon plc ethernet module",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "schneider electric",
        "version": "171ccc96020c"
      },
      {
        "model": "tsxwmy100",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxwmy10",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp576634",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp575634",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp574823m",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp574823a",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp574823",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp574634",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp573634",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp573623m",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp573623a",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp573623",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp572823m",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp572823",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp572634",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp572623mc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp572623m",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxp571634m",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxntp100",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxetz510",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxetz410",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxety5103c",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxety5103",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxety4103c",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxety4103",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxety110wsc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxety110ws",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxetc100",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "tsxetc0101",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "bmxprmxxxx",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "bmxp342030h",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "bmxp3420302h",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "bmxp342030",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "bmxp342020h",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "bmxp342020",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "bmxnor0200h",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "bmxnoe0110h",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "bmxnoe0110",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "bmxnoe0100",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "bmxnoc0402",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "bmxnoc0401",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "bmx noe",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "01100"
      },
      {
        "model": "171ccc98030",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "171ccc98020",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "171ccc96030c",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "171ccc96030",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "171ccc96020c",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "171ccc96020",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "170ent11002",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "170ent11001",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "140nwm10000",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "140noe77111c",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "140noe77111",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "140noe77110",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "140noe77101c",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "140noe77101",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "140noe77100",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "140noc78100",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "140noc78000",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "140noc77100",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "140cpu65260",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "140cpu65160",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "140cpu65150",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "schneider electric",
        "version": "0"
      },
      {
        "model": "bmxnor0200h",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "140cpu65150",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "140cpu65160",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "140cpu65260",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "140noc77100",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "140noc78000",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "140noe77100",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "140noe77101",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "140noe77101c",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "140noe77110",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "140noe77111",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "140noe77111c",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "140nwm10000",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "170ent11001",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "170ent11002",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "170ent11002c",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "171ccc96020",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "171ccc96020c",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "171ccc96030",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "171ccc96030c",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "171ccc98020",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "171ccc98030",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "bmxnoc0401",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "bmxnoc0402",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "bmxnoe0100",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "bmxnoe0110",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "bmxnoe0110h",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "bmxp342020",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "bmxp342020h",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "bmxp342030",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "bmxp342030h",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "bmxp3420302",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "bmxp3420302h",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "bmxprmxxxx",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "stbnic2212",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "stbnip2212",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxetc100",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxetc0101",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxety110ws",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxety110wsc",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxety4103",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxety4103c",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxety5103",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxety5103c",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxetz410",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxetz510",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxntp100",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp571634m",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp572623m",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp572623mc",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp572823m",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp572823mc",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp573623am",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp573623m",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp573623mc",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp573634m",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp574634m",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp574823am",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp574823m",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp574823mc",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp575634m",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxp576634m",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxwmy100",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      },
      {
        "model": "tsxwmy100c",
        "scope": null,
        "trust": 0.2,
        "vendor": "modicon plc ethernet module",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "cce5fe38-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2014-06695"
      },
      {
        "db": "BID",
        "id": "70193"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2014-004531"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201410-075"
      },
      {
        "db": "NVD",
        "id": "CVE-2014-0754"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/h:schneider_electric:modicon_plc_ethernet_module",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2014-004531"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Billy Rios",
    "sources": [
      {
        "db": "BID",
        "id": "70193"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2014-0754",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2014-0754",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 1.8,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2014-06695",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "IVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "cce5fe38-2351-11e6-abef-000c29c66e3d",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.2,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.9 [IVD]"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "VHN-68247",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2014-0754",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2014-0754",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2014-06695",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201410-075",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "IVD",
            "id": "cce5fe38-2351-11e6-abef-000c29c66e3d",
            "trust": 0.2,
            "value": "CRITICAL"
          },
          {
            "author": "VULHUB",
            "id": "VHN-68247",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "cce5fe38-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2014-06695"
      },
      {
        "db": "VULHUB",
        "id": "VHN-68247"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2014-004531"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201410-075"
      },
      {
        "db": "NVD",
        "id": "CVE-2014-0754"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request. Schneider Electric provides products and services in the areas of energy and infrastructure, industry, data centers and networks, buildings and residential. \nExploiting this issue can allow an attacker to gain access to arbitrary  files. Information harvested may aid in launching further attacks. Schneider Electric Modicon PLC Ethernet is an Ethernet programmable controller produced by French Schneider Electric (Schneider Electric). The following versions are affected: Schneider Electric Modicon PLC Ethernet modules 140CPU65x Version, 140NOC78x Version, 140NOE77x Version, BMXNOC0401 Version, BMXNOC0402 Version, BMXNOE0100 Version, BMXNOE0110x Version, TSXETC101 Version, TSXETC0101 Version, TSXETY4103x Version, TSXETY5103x Version, TSXP57x Version, TSXP57x Version",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2014-0754"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2014-004531"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2014-06695"
      },
      {
        "db": "BID",
        "id": "70193"
      },
      {
        "db": "IVD",
        "id": "cce5fe38-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "VULHUB",
        "id": "VHN-68247"
      }
    ],
    "trust": 2.7
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2014-0754",
        "trust": 3.6
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-14-273-01",
        "trust": 3.4
      },
      {
        "db": "BID",
        "id": "70193",
        "trust": 2.6
      },
      {
        "db": "SCHNEIDER",
        "id": "SEVD-2014-260-01",
        "trust": 2.0
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201410-075",
        "trust": 0.9
      },
      {
        "db": "CNVD",
        "id": "CNVD-2014-06695",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2014-004531",
        "trust": 0.8
      },
      {
        "db": "IVD",
        "id": "CCE5FE38-2351-11E6-ABEF-000C29C66E3D",
        "trust": 0.2
      },
      {
        "db": "VULHUB",
        "id": "VHN-68247",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "cce5fe38-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2014-06695"
      },
      {
        "db": "VULHUB",
        "id": "VHN-68247"
      },
      {
        "db": "BID",
        "id": "70193"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2014-004531"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201410-075"
      },
      {
        "db": "NVD",
        "id": "CVE-2014-0754"
      }
    ]
  },
  "id": "VAR-201410-1134",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "IVD",
        "id": "cce5fe38-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2014-06695"
      },
      {
        "db": "VULHUB",
        "id": "VHN-68247"
      }
    ],
    "trust": 1.691666675
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "cce5fe38-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2014-06695"
      }
    ]
  },
  "last_update_date": "2024-11-23T22:13:39.284000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Modicon PLC Ethernet Communication Modules",
        "trust": 0.8,
        "url": "http://download.schneider-electric.com/files?p_Reference=SEVD-2014-260-01\u0026p_EnDocType=Software%20-%20Updates\u0026p_File_Id=608959359\u0026p_File_Name=SEVD-2014-260-01.pdf"
      },
      {
        "title": "Patches for multiple Schneider Electric product catalog traversal vulnerabilities",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/50841"
      },
      {
        "title": "BMXNOE0100+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54170"
      },
      {
        "title": "BMXNOE0110+Web+and+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54171"
      },
      {
        "title": "140NOE77101+Exec+For+Unity+Users",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54184"
      },
      {
        "title": "140NOE77101+Exec+For+Non+Unity+Users",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54183"
      },
      {
        "title": "140NOE77111+Exec+For+Unity+and+Non+Unity+Users",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54185"
      },
      {
        "title": "140CPU65260+Quantum+Copro+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54180"
      },
      {
        "title": "140CPU65160+Quantum+Copro+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54179"
      },
      {
        "title": "140CPU65150+Quantum+CoPro+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54178"
      },
      {
        "title": "140NOC78000+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54181"
      },
      {
        "title": "TSXP575634M+Premium+Copro+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54176"
      },
      {
        "title": "TSXP574634M+Premium+Copro+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54175"
      },
      {
        "title": "TSXP576634M+Premium+Copro+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54177"
      },
      {
        "title": "TSXETC101+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54172"
      },
      {
        "title": "140NOC78100+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54182"
      },
      {
        "title": "TSXP573634M+ETY+Port+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54188"
      },
      {
        "title": "TSXP572634M+ETY+Port+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54187"
      },
      {
        "title": "TSXETY5103+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54174"
      },
      {
        "title": "TSXP571634M+ETY+Port+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54186"
      },
      {
        "title": "TSXETY4103+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54173"
      },
      {
        "title": "BMXNOC0401+Exec",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54169"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2014-06695"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2014-004531"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201410-075"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-22",
        "trust": 1.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-68247"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2014-004531"
      },
      {
        "db": "NVD",
        "id": "CVE-2014-0754"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.4,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-14-273-01"
      },
      {
        "trust": 1.7,
        "url": "http://www.securityfocus.com/bid/70193"
      },
      {
        "trust": 1.6,
        "url": "http://download.schneider-electric.com/files?p_reference=sevd-2014-260-01\u0026p_endoctype=software%20-%20updates\u0026p_file_id=608959359\u0026p_file_name=sevd-2014-260-01.pdf"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-0754"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-0754"
      },
      {
        "trust": 0.3,
        "url": "http://www.schneider-electric.com/site/home/index.cfm/ww/?selectcountry=true"
      },
      {
        "trust": 0.3,
        "url": "http://download.schneider-electric.com/files?p_doc_ref=sevd-2014-260-01"
      },
      {
        "trust": 0.1,
        "url": "http://download.schneider-electric.com/files?p_reference=sevd-2014-260-01\u0026amp;p_endoctype=software%20-%20updates\u0026amp;p_file_id=608959359\u0026amp;p_file_name=sevd-2014-260-01.pdf"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2014-06695"
      },
      {
        "db": "VULHUB",
        "id": "VHN-68247"
      },
      {
        "db": "BID",
        "id": "70193"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2014-004531"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201410-075"
      },
      {
        "db": "NVD",
        "id": "CVE-2014-0754"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "IVD",
        "id": "cce5fe38-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2014-06695"
      },
      {
        "db": "VULHUB",
        "id": "VHN-68247"
      },
      {
        "db": "BID",
        "id": "70193"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2014-004531"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201410-075"
      },
      {
        "db": "NVD",
        "id": "CVE-2014-0754"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2014-10-14T00:00:00",
        "db": "IVD",
        "id": "cce5fe38-2351-11e6-abef-000c29c66e3d"
      },
      {
        "date": "2014-10-14T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2014-06695"
      },
      {
        "date": "2014-10-03T00:00:00",
        "db": "VULHUB",
        "id": "VHN-68247"
      },
      {
        "date": "2014-09-30T00:00:00",
        "db": "BID",
        "id": "70193"
      },
      {
        "date": "2014-10-07T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2014-004531"
      },
      {
        "date": "2014-10-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201410-075"
      },
      {
        "date": "2014-10-03T18:55:06.017000",
        "db": "NVD",
        "id": "CVE-2014-0754"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2014-10-14T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2014-06695"
      },
      {
        "date": "2016-04-04T00:00:00",
        "db": "VULHUB",
        "id": "VHN-68247"
      },
      {
        "date": "2014-09-30T00:00:00",
        "db": "BID",
        "id": "70193"
      },
      {
        "date": "2014-10-07T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2014-004531"
      },
      {
        "date": "2022-02-11T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201410-075"
      },
      {
        "date": "2024-11-21T02:02:44.980000",
        "db": "NVD",
        "id": "CVE-2014-0754"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201410-075"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Schneider Electric Modicon PLC Ethernet Module  SchneiderWEB Vulnerable to directory traversal",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2014-004531"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Path traversal",
    "sources": [
      {
        "db": "IVD",
        "id": "cce5fe38-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201410-075"
      }
    ],
    "trust": 0.8
  }
}

CVE-2014-0754 (GCVE-0-2014-0754)

Vulnerability from cvelistv5

Published

2014-10-03 18:00

Modified

2025-08-25 23:45

Severity ?

CWE

Summary

References

▼	URL	Tags
	http://www.securityfocus.com/bid/70193	vdb-entry, x_refsource_BID
	https://www.cisa.gov/news-events/ics-advisories/icsa-14-273-01
	https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2014-260-01

Impacted products

	Vendor	Product	Version
	Schneider Electric	Ethernet modules for M340, Quantum and Premium PLC ranges	Version: 140CPU65150 Version: 140CPU65160 Version: 140CPU65260 Version: 140NOC77100 Version: 140NOC78000 Version: 140NOC78100 Version: 140NOE77100 Version: 140NOE77101 Version: 140NOE77101C Version: 140NOE77110 Version: 140NOE77111 Version: 140NOE77111C Version: 140NWM10000 Version: 170ENT11001 Version: 170ENT11002 Version: 170ENT11002C Version: 171CCC96020 Version: 171CCC96020C Version: 171CCC96030 Version: 171CCC96030C Version: 171CCC98020 Version: 171CCC98030 Version: BMXNOC0401 Version: BMXNOC0402 Version: BMXNOE0100 Version: BMXNOE0110 Version: BMXNOE0110H Version: BMXNOR0200H Version: BMXP342020 Version: BMXP342020H Version: BMXP342030 Version: BMXP3420302 Version: BMXP3420302H Version: BMXP342030H Version: BMXPRMxxxx Version: STBNIC2212 Version: STBNIP2212 Version: TSXETC0101 Version: TSXETC100 Version: TSXETY110WS Version: TSXETY110WSC Version: TSXETY4103 Version: TSXETY4103C Version: TSXETY5103 Version: TSXETY5103C Version: TSXETZ410 Version: TSXETZ510 Version: TSXNTP100 Version: TSXP572623M Version: TSXP572623MC Version: TSXP572823M Version: TSXP572823MC Version: TSXP573623AM Version: TSXP573623M Version: TSXP573623MC Version: TSXP574634M Version: TSXP574823AM Version: TSXP574823M Version: TSXP574823MC Version: TSXP575634M Version: TSXP576634M Version: TSXWMY100 Version: TSXWMY100C Version: TSXP571634M Version: TSXP572634M Version: TSXP573634M

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:27:19.540Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "70193",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/70193"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-14-273-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://download.schneider-electric.com/files?p_Reference=SEVD-2014-260-01\u0026p_EnDocType=Software%20-%20Updates\u0026p_File_Id=608959359\u0026p_File_Name=SEVD-2014-260-01.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Ethernet modules for M340, Quantum and Premium PLC ranges",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "140CPU65150"
            },
            {
              "status": "affected",
              "version": "140CPU65160"
            },
            {
              "status": "affected",
              "version": "140CPU65260"
            },
            {
              "status": "affected",
              "version": "140NOC77100"
            },
            {
              "status": "affected",
              "version": "140NOC78000"
            },
            {
              "status": "affected",
              "version": "140NOC78100"
            },
            {
              "status": "affected",
              "version": "140NOE77100"
            },
            {
              "status": "affected",
              "version": "140NOE77101"
            },
            {
              "status": "affected",
              "version": "140NOE77101C"
            },
            {
              "status": "affected",
              "version": "140NOE77110"
            },
            {
              "status": "affected",
              "version": "140NOE77111"
            },
            {
              "status": "affected",
              "version": "140NOE77111C"
            },
            {
              "status": "affected",
              "version": "140NWM10000"
            },
            {
              "status": "affected",
              "version": "170ENT11001"
            },
            {
              "status": "affected",
              "version": "170ENT11002"
            },
            {
              "status": "affected",
              "version": "170ENT11002C"
            },
            {
              "status": "affected",
              "version": "171CCC96020"
            },
            {
              "status": "affected",
              "version": "171CCC96020C"
            },
            {
              "status": "affected",
              "version": "171CCC96030"
            },
            {
              "status": "affected",
              "version": "171CCC96030C"
            },
            {
              "status": "affected",
              "version": "171CCC98020"
            },
            {
              "status": "affected",
              "version": "171CCC98030"
            },
            {
              "status": "affected",
              "version": "BMXNOC0401"
            },
            {
              "status": "affected",
              "version": "BMXNOC0402"
            },
            {
              "status": "affected",
              "version": "BMXNOE0100"
            },
            {
              "status": "affected",
              "version": "BMXNOE0110"
            },
            {
              "status": "affected",
              "version": "BMXNOE0110H"
            },
            {
              "status": "affected",
              "version": "BMXNOR0200H"
            },
            {
              "status": "affected",
              "version": "BMXP342020"
            },
            {
              "status": "affected",
              "version": "BMXP342020H"
            },
            {
              "status": "affected",
              "version": "BMXP342030"
            },
            {
              "status": "affected",
              "version": "BMXP3420302"
            },
            {
              "status": "affected",
              "version": "BMXP3420302H"
            },
            {
              "status": "affected",
              "version": "BMXP342030H"
            },
            {
              "status": "affected",
              "version": "BMXPRMxxxx"
            },
            {
              "status": "affected",
              "version": "STBNIC2212"
            },
            {
              "status": "affected",
              "version": "STBNIP2212"
            },
            {
              "status": "affected",
              "version": "TSXETC0101"
            },
            {
              "status": "affected",
              "version": "TSXETC100"
            },
            {
              "status": "affected",
              "version": "TSXETY110WS"
            },
            {
              "status": "affected",
              "version": "TSXETY110WSC"
            },
            {
              "status": "affected",
              "version": "TSXETY4103"
            },
            {
              "status": "affected",
              "version": "TSXETY4103C"
            },
            {
              "status": "affected",
              "version": "TSXETY5103"
            },
            {
              "status": "affected",
              "version": "TSXETY5103C"
            },
            {
              "status": "affected",
              "version": "TSXETZ410"
            },
            {
              "status": "affected",
              "version": "TSXETZ510"
            },
            {
              "status": "affected",
              "version": "TSXNTP100"
            },
            {
              "status": "affected",
              "version": "TSXP572623M"
            },
            {
              "status": "affected",
              "version": "TSXP572623MC"
            },
            {
              "status": "affected",
              "version": "TSXP572823M"
            },
            {
              "status": "affected",
              "version": "TSXP572823MC"
            },
            {
              "status": "affected",
              "version": "TSXP573623AM"
            },
            {
              "status": "affected",
              "version": "TSXP573623M"
            },
            {
              "status": "affected",
              "version": "TSXP573623MC"
            },
            {
              "status": "affected",
              "version": "TSXP574634M"
            },
            {
              "status": "affected",
              "version": "TSXP574823AM"
            },
            {
              "status": "affected",
              "version": "TSXP574823M"
            },
            {
              "status": "affected",
              "version": "TSXP574823MC"
            },
            {
              "status": "affected",
              "version": "TSXP575634M"
            },
            {
              "status": "affected",
              "version": "TSXP576634M"
            },
            {
              "status": "affected",
              "version": "TSXWMY100"
            },
            {
              "status": "affected",
              "version": "TSXWMY100C"
            },
            {
              "status": "affected",
              "version": "TSXP571634M"
            },
            {
              "status": "affected",
              "version": "TSXP572634M"
            },
            {
              "status": "affected",
              "version": "TSXP573634M"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Billy Rios"
        }
      ],
      "datePublic": "2014-09-30T06:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eDirectory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.\u003c/p\u003e"
            }
          ],
          "value": "Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request."
        }
      ],
      "metrics": [
        {
          "cvssV2_0": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-25T23:45:03.684Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "name": "70193",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/70193"
        },
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-273-01"
        },
        {
          "url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2014-260-01"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePlease see Schneider Electric\u2019s vulnerability disclosure \n(SEVD-2014-260-01)Schneider Electric Vulnerability Disclosure \u2013 Modicon \nEthernet Comm Modules - SEVD-2014-260-01 - \n\u003ca target=\"_blank\" rel=\"nofollow\" href=\"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2014-260-01\"\u003ehttp://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2014-260-01\u003c/a\u003e. for more detailed \ninformation on which product part numbers are affected, as well as the \ncomplete list of which devices have released firmware updates available.\u003c/p\u003e\u003cp\u003eThis vulnerability disclosure can be downloaded at the following URL:\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"http://www.schneider-electric.com/ww/en/download/\"\u003ehttp://www.schneider-electric.com/ww/en/download/\u003c/a\u003e\u003c/p\u003e\n\n\u003cbr\u003e"
            }
          ],
          "value": "Please see Schneider Electric\u2019s vulnerability disclosure \n(SEVD-2014-260-01)Schneider Electric Vulnerability Disclosure \u2013 Modicon \nEthernet Comm Modules - SEVD-2014-260-01 - \n http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2014-260-01 . for more detailed \ninformation on which product part numbers are affected, as well as the \ncomplete list of which devices have released firmware updates available.\n\nThis vulnerability disclosure can be downloaded at the following URL:\u00a0 http://www.schneider-electric.com/ww/en/download/"
        }
      ],
      "source": {
        "advisory": "ICSA-14-273-01",
        "discovery": "EXTERNAL"
      },
      "title": "Schneider Electric",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSearch downloads for SEVD-14-260-01, then keyword SEVD-14-260-01 to \ndownload the vulnerability disclosure. This URL site can also be used to\n download firmware updates identified in the vulnerability disclosure.\u003c/p\u003e\n\u003cp\u003eSchneider Electric also recommends the following measures to mitigate the vulnerability for the remaining affected devices:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUse a deep packet inspection firewall to prevent HTTP requests to the product that contains traversals in the URL.\u003c/li\u003e\n\u003cli\u003eDisable Port 80 (HTTP) on modules where it is possible.\u003c/li\u003e\n\u003cli\u003eBlock Port 80 in firewalls to these devices, except for trusted devices.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003ePlease contact Schneider Electric Customer Care Center for more information.\u003c/p\u003e\n\n\u003cbr\u003e"
            }
          ],
          "value": "Search downloads for SEVD-14-260-01, then keyword SEVD-14-260-01 to \ndownload the vulnerability disclosure. This URL site can also be used to\n download firmware updates identified in the vulnerability disclosure.\n\n\nSchneider Electric also recommends the following measures to mitigate the vulnerability for the remaining affected devices:\n\n\n\n  *  Use a deep packet inspection firewall to prevent HTTP requests to the product that contains traversals in the URL.\n\n  *  Disable Port 80 (HTTP) on modules where it is possible.\n\n  *  Block Port 80 in firewalls to these devices, except for trusted devices.\n\n\n\n\nPlease contact Schneider Electric Customer Care Center for more information."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "ID": "CVE-2014-0754",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "70193",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/70193"
            },
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-14-273-01",
              "refsource": "MISC",
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-14-273-01"
            },
            {
              "name": "http://download.schneider-electric.com/files?p_Reference=SEVD-2014-260-01\u0026p_EnDocType=Software%20-%20Updates\u0026p_File_Id=608959359\u0026p_File_Name=SEVD-2014-260-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://download.schneider-electric.com/files?p_Reference=SEVD-2014-260-01\u0026p_EnDocType=Software%20-%20Updates\u0026p_File_Id=608959359\u0026p_File_Name=SEVD-2014-260-01.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2014-0754",
    "datePublished": "2014-10-03T18:00:00",
    "dateReserved": "2014-01-02T00:00:00",
    "dateUpdated": "2025-08-25T23:45:03.684Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted