Schneider Electric 140cpu67160 Firmware vulnerabilities

4 CVEs affecting Schneider Electric 140cpu67160 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7477, published 2020-03-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-6857, published 2020-01-06. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions)…
CVE-2019-6856, published 2020-01-06. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions)…
CVE-2018-7794, published 2020-01-06. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions)…
CVE-2020-7477, published 2020-03-23. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 (Versions 7.0 and prior), Quantum processors with integrated…