NVD

Id
29616  
Name
CVE-2014-0754  
Description
Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-10-03  
Modified Date
2016-04-04  
Seq
2014-0754  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
156748 29616 CVE-2014-0754 http://download.schneider-electric.com/files?p_Reference=SEVD-2014-260-01&p_EnDocType=Software%20-%20Updates&p_File_Id=608959359&p_File_Name=SEVD-2014-260-01.pdf  View
156749 29616 CVE-2014-0754 70193  View
156750 29616 CVE-2014-0754 https://ics-cert.us-cert.gov/advisories/ICSA-14-273-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15656 JVNDB-2014-004531 Schneider Electric Modicon PLC Ethernet モジュールの SchneiderWEB におけるディレクトリトラバーサルの脆弱性 Schneider Electric Modicon PLC Ethernet モジュールの SchneiderWEB には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-0754 68155 CVE-2014-0754 29616 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004531.html 2014-09-16 2014-10-07 View