Skip to content
Fencer Intel
critical 10.0

CVE-2011-4859 json

The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* mo…

published 2011-12-17 14 y ago modified 2026-06-16 4 mo ago also EUVD-2011-4776

cvss
10.0
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
3.9%
EPSS 3.9% chance of exploitation in 30 days, percentile 90%
public exploits
0
none known

Summary

The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-12-018-01B updated cvss 10.0

Schneider Electric Quantum Ethernet Module Hard-Coded Credentials

  • Schneider Electric 140CPU65150 <=Firmware_V3.5 Schneider Electric 140CPU65160 <=Firmware_V3.5 Schneider Electric 140CPU65260 <=Firmware_V3.5 Schneider Electric 140NOC77100 <=Firmware_V1.01 Schneider Electric 140NOC77101 <=Firmware_V1.01 Schneider Electric 140NOE77100 <=Firmware_V3.4
    +20 more products
    Schneider Electric 140NOE77101 <=Firmware_V4.9 Schneider Electric 140NOE77110 <=Firmware_V3.3 Schneider Electric 140NOE77111 <=Firmware_V5.0 Schneider Electric BMXNOC0401 <=Firmware_V1.01 Schneider Electric BMXNOE0100 <=Firmware_V2.3 Schneider Electric BMXNOE0110 <=Firmware_V4.65 Schneider Electric BMXP342020 <=Firmware_V2.2 Schneider Electric BMXP342030 <=Firmware_V2.2 Schneider Electric STBNIC2212 <=Firmware_V2.10 Schneider Electric STBNIP2212 <=Firmware_V2.73 Schneider Electric STBNIP2311 <=Firmware_V3.01 Schneider Electric TSXETC101 <=Firmware_V1.01 Schneider Electric TSXETY4103 <=Firmware_V5.0 Schneider Electric TSXETY5103 <=Firmware_V5.0 Schneider Electric TSXP571634M <=Firmware_V4.9 Schneider Electric TSXP572634M <=Firmware_V4.9 Schneider Electric TSXP573634M <=Firmware_V4.9 Schneider Electric TSXP574634M <=Firmware_V3.5 Schneider Electric TSXP575634M <=Firmware_V3.5 Schneider Electric TSXP576634M <=Firmware_V3.5
    affected: mitigation “M340 - BMXNOE0100 Exec V2.50 or greater, BMXNOE0110 Exec v5.3 or greater, and BMXNOC0401 Exec V2.01 or greater.”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

3.89% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 2.0 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.