CVE-2018-7240: Schneider Electric 140cpu31110 Firmware

High severity, CVSS 8.8. EPSS: 3.2% chance of exploitation in the next 30 days.

A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.

Affected products

• Schneider Electric 140cpu31110 Firmware: affected versions not specified
• Schneider Electric 140cpu31110c Firmware: affected versions not specified
• Schneider Electric 140cpu43412u Firmware: affected versions not specified
• Schneider Electric 140cpu43412uc Firmware: affected versions not specified
• Schneider Electric 140cpu65150 Firmware: affected versions not specified
• Schneider Electric 140cpu65150c Firmware: affected versions not specified
• Schneider Electric 140cpu65160 Firmware: affected versions not specified
• Schneider Electric 140cpu65160c Firmware: affected versions not specified
• Schneider Electric 140cpu65160s Firmware: affected versions not specified
• Schneider Electric 140cpu65260 Firmware: affected versions not specified
• Schneider Electric 140cpu65260c Firmware: affected versions not specified
• Schneider Electric 140cpu65860 Firmware: affected versions not specified
• Schneider Electric 140cpu65860c Firmware: affected versions not specified

Published 2018-04-18. Last modified 2026-06-17.