Test ID:	1.3.6.1.4.1.25623.1.0.106585
Category:	Web application abuses
Title:	Schneider Electric Modicon M340 Devices Buffer Overflow Vulnerability (SEVD-2015-344-01)
Summary:	Schneider Electric Modicon M340 devices are prone to a buffer; overflow vulnerability.
Description:	Summary: Schneider Electric Modicon M340 devices are prone to a buffer overflow vulnerability. Vulnerability Insight: Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data. Vulnerability Impact: A unauthenticated attacker may execute arbitrary code. Affected Software/OS: Schneider Electric devices: - BMXNOC0401 prior to version 2.09 - BMXNOE0100 prior to version 3.10 - BMXNOE0100H prior to version 3.10 - BMXNOE0110 prior to version 6.30 - BMXNOE0110H prior to version 6.30 - BMXNOR0200 prior to version 1.70 - BMXNOR0200H prior to version 1.70 - BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H and BMXPRA0100 prior to version 2.80 Solution: See the referenced vendor advisory for a solution. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7937 BugTraq ID: 79622 http://www.securityfocus.com/bid/79622 https://ics-cert.us-cert.gov/advisories/ICSA-15-351-01
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.