Hardcoded Password Vulnerability in Schneider Electric Quantum Ethernet Module

CVE-2011-4859

Summary

The Quantum Ethernet Module from Schneider Electric is susceptible to an authentication bypass due to multiple hardcoded passwords. These accounts are associated with critical network services, including TELNET and FTP. As a result, remote attackers can exploit this vulnerability to gain unauthorized access to the affected modules, posing significant risks to the integrity and confidentiality of operational systems. Remediation is crucial to prevent potential breaches and safeguard infrastructure.

References