Cross-site Scripting Vulnerability in Schneider Electric PLCs

CVE-2018-7810

What is CVE-2018-7810?

A cross-site scripting vulnerability exists in the embedded web servers of Schneider Electric's Modicon M340, Premium, Quantum PLCs, and BMXNOR0200 models. This flaw allows an attacker to craft a malicious URL containing JavaScript, which can be executed within the user's browser upon accessing the URL. If successfully exploited, this vulnerability may lead to unauthorized actions performed in the context of the user's session, potentially compromising the integrity and security of the user's machine.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References