VDB-190181 · CVE-2020-7534 · SEVD-2022-011-01

Schneider Electric Modicon M340/Modicon Quantum/Modicon Premium Web Server cross-site request forgery

A vulnerability, which was classified as problematic, has been found in Schneider Electric Modicon M340, Modicon Quantum and Modicon Premium (SCADA Software) (unknown version). This issue affects an unknown code block of the component Web Server. Applying a patch is able to eliminate this problem.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

1	21
0	19

Field

advisory_identifier	2
source_cve_assigned	1
exploit_price_0day	1
vulnerability_cvss3_meta_tempscore	1
vulnerability_cvss3_meta_basescore	1

Commit Conf

90%	27
50%	10
100%	2
70%	1

Approve Conf

90%	27
80%	10
100%	2
70%	1

ID	Commited	User	Field	Change	Remarks	Accepted	Reason	C
12050115	01/15/2022	VulD...	cve_assigned	1579561200 (01/21/2020)	cve.mitre.org	01/15/2022	accepted	70
12036693	01/12/2022	VulD...	identifier	SEVD-2022-011-01		01/12/2022	accepted	100
12036534	01/12/2022	VulD...	price_0day	$0-$5k	see exploit price documentation	01/12/2022	accepted	90
12036533	01/12/2022	VulD...	cvss3_meta_tempscore	4.1	see CVSS documentation	01/12/2022	accepted	90
12036532	01/12/2022	VulD...	cvss3_meta_basescore	4.3	see CVSS documentation	01/12/2022	accepted	90
12036531	01/12/2022	VulD...	cvss3_vuldb_tempscore	4.1	see CVSS documentation	01/12/2022	accepted	90
12036530	01/12/2022	VulD...	cvss3_vuldb_basescore	4.3	see CVSS documentation	01/12/2022	accepted	90
12036529	01/12/2022	VulD...	cvss2_vuldb_tempscore	4.4	see CVSS documentation	01/12/2022	accepted	90
12036528	01/12/2022	VulD...	cvss2_vuldb_basescore	5.0	see CVSS documentation	01/12/2022	accepted	90
12036527	01/12/2022	VulD...	cvss3_vuldb_e	X	derived from historical data	01/12/2022	accepted	80
12036526	01/12/2022	VulD...	cvss2_vuldb_e	ND	derived from historical data	01/12/2022	accepted	80
12036525	01/12/2022	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	01/12/2022	accepted	80
12036524	01/12/2022	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	01/12/2022	accepted	80
12036523	01/12/2022	VulD...	cvss2_vuldb_ai	N	derived from vuldb v3 vector	01/12/2022	accepted	80
12036522	01/12/2022	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	01/12/2022	accepted	80
12036521	01/12/2022	VulD...	cvss2_vuldb_ci	N	derived from vuldb v3 vector	01/12/2022	accepted	80
12036520	01/12/2022	VulD...	cvss2_vuldb_au	N	derived from vuldb v3 vector	01/12/2022	accepted	80
12036519	01/12/2022	VulD...	cvss2_vuldb_ac	L	derived from vuldb v3 vector	01/12/2022	accepted	80
12036518	01/12/2022	VulD...	cvss2_vuldb_av	N	derived from vuldb v3 vector	01/12/2022	accepted	80
12036517	01/12/2022	VulD...	type	SCADA Software		01/12/2022	accepted	90