Buffer Overflow Vulnerability in GoAhead Web Server on Schneider Electric Modicon M340 PLC

CVE-2015-7937

Summary

A stack-based buffer overflow vulnerability exists in the GoAhead Web Server utilized by Schneider Electric's Modicon M340 PLC devices. This flaw allows remote attackers to exploit the system by supplying excessively long passwords during the HTTP Basic Authentication process, potentially leading to arbitrary code execution. The affected models include BMXNOx and BMXPx, making it crucial for users of these devices to implement security measures and updates to mitigate this risk.

References