CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-7937

Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.029

EPSS Ranking 85.7%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2015-7937

Schneider-Electric » Bmxnoc0401 » Version: N/A

cpe:2.3:h:schneider-electric:bmxnoc0401:-
Schneider-Electric » Bmxnoe0100 » Version: N/A

cpe:2.3:h:schneider-electric:bmxnoe0100:-
Schneider-Electric » Bmxnoe0100h » Version: N/A

cpe:2.3:h:schneider-electric:bmxnoe0100h:-
Schneider-Electric » Bmxnoe0110 » Version: N/A

cpe:2.3:h:schneider-electric:bmxnoe0110:-
Schneider-Electric » Bmxnoe0110h » Version: N/A

cpe:2.3:h:schneider-electric:bmxnoe0110h:-
Schneider-Electric » Bmxnor0200 » Version: N/A

cpe:2.3:h:schneider-electric:bmxnor0200:-
Schneider-Electric » Bmxnor0200h » Version: N/A

cpe:2.3:h:schneider-electric:bmxnor0200h:-
Schneider-Electric » Bmxpra0100 » Version: N/A

cpe:2.3:h:schneider-electric:bmxpra0100:-
Schneider-Electric » Modicon M340 Bmxp342020 » Version: N/A

cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-
Schneider-Electric » Modicon M340 Bmxp342020h » Version: N/A

cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020h:-
Schneider-Electric » Modicon M340 Bmxp3420302 » Version: N/A

cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302:-
Schneider-Electric » Modicon M340 Bmxp3420302h » Version: N/A

cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302h:-
Schneider-Electric » Modicon M340 Bmxp342030 » Version: N/A

cpe:2.3:h:schneider-electric:modicon_m340_bmxp342030:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-7937

Products

Pricing

Contact Us