Schneider Electric

published 2014-10-03 12 y ago modified 2026-06-17 4 mo ago also EUVD-2014-0785

cvss: 10.0; version 2.0, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 9.5%; EPSS 9.5% chance of exploitation in 30 days, percentile 95%
public exploits: 0; none known

Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.

Patch / fix

links 1

download.schneider-electric.com/files?p_Reference=SEVD-2014-260-01&p_EnDocType=Software%20… advisory

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-14-273-01 updated 2025-06-06 cvss 10.0

SchneiderWEB Server Directory Traversal Vulnerability

Schneider Electric SchneiderWEB web HMI 140CPU65150, 171CCC96020, BMXP3420302H, TSXP572623M
affected: mitigation “This vulnerability disclosure can be downloaded at the following URL: (http://www.schneider-electric.com/ww/en/download/)”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

9.51% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
CNA	2.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C
NVD	2.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

Schneider Electric Ethernet modules for M340, Quantum and Premium PLC ranges

Classification

Weakness

CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

download.schneider-electric.com /files?p_Reference=SEVD-2014-260-01&p_EnDocType=Software%20-%20Updates&p_File_Id=608959359&p_File_Name=SEVD-20
patch, vendor-advisory
securityfocus.com /bid/70193
vdb-entry, third-party-advisory
cisa.gov /news-events/ics-advisories/icsa-14-273-01
download.schneider-electric.com /files?p_Doc_Ref=SEVD-2014-260-01
ics-cert.us-cert.gov /advisories/ICSA-14-273-01
third-party-advisory, us-government-resource

Sources

CVE List CVE-2014-0754
NVD CVE-2014-0754

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary