Schneider Electric Quantum Ethernet Module 140noe77111 vulnerabilities

3 CVEs affecting Schneider Electric Quantum Ethernet Module 140noe77111, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-4861, published 2011-12-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-4859, published 2011-12-17. High severity, CVSS 10.0. EPSS: 3.9% chance of exploitation in the next 30 days. The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB…
CVE-2011-4861, published 2011-12-17. High severity, CVSS 10.0. EPSS: 3% chance of exploitation in the next 30 days. The modbus_125_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) allows remote attackers to install arbitrary firmware…
CVE-2011-4860, published 2011-12-17. High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days. The ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) generates the password for the fwupgrade account by performing…