CVE-2018-7760: Schneider Electric 140cpu31110 Firmware

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization.

Affected products

• Schneider Electric 140cpu31110 Firmware: affected versions not specified
• Schneider Electric 140cpu31110c Firmware: affected versions not specified
• Schneider Electric 140cpu43412u Firmware: affected versions not specified
• Schneider Electric 140cpu43412uc Firmware: affected versions not specified
• Schneider Electric 140cpu65150 Firmware: affected versions not specified
• Schneider Electric 140cpu65150c Firmware: affected versions not specified
• Schneider Electric 140cpu65160 Firmware: affected versions not specified
• Schneider Electric 140cpu65160c Firmware: affected versions not specified
• Schneider Electric 140cpu65160s Firmware: affected versions not specified
• Schneider Electric 140cpu65260 Firmware: affected versions not specified
• Schneider Electric 140cpu65260c Firmware: affected versions not specified
• Schneider Electric 140cpu65860 Firmware: affected versions not specified
• Schneider Electric 140cpu65860c Firmware: affected versions not specified
• Schneider Electric BMXNOR0200 Firmware: affected versions not specified
• Schneider Electric BMXNOR0200H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP341000 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP341000H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342000 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420102 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420102CL Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342020 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP342020H Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302 Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302CL Firmware: affected versions not specified
• Schneider Electric Modicon m340 BMXP3420302H Firmware: affected versions not specified
• and 32 more

Published 2018-04-18. Last modified 2026-06-17.