Approved changes feed: RSS · Atom

cpe:2.3:h:schneider-electric:modicom_quantum:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductModicom Quantum (b159bc98-f13b-5fd2-a072-07bf90c16564)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-7833 not_vulnerable 2026-06-08 05:12:04.490591 Details available
An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable
Published: 2018-12-17T22:00:00.000Z
Updated: 2024-08-05T06:37:59.565Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7830 not_vulnerable 2026-06-08 05:12:04.435194 Details available
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a denial of service can occur for ~1 minute by sending a specially crafted HTTP request.
Published: 2018-11-30T19:00:00.000Z
Updated: 2024-08-05T06:37:59.474Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7812 not_vulnerable 2026-06-08 05:12:04.294304 Details available
An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where the web server sends different responses in a way that exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
Published: 2018-12-17T22:00:00.000Z
Updated: 2024-08-05T06:37:59.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7811 not_vulnerable 2026-06-08 05:12:04.293637 Details available
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the change password function of the web server
Published: 2018-11-30T19:00:00.000Z
Updated: 2024-08-05T06:37:59.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7810 not_vulnerable 2026-06-08 05:12:04.292959 Details available
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to craft a URL containing JavaScript that will be executed within the user's browser, potentially impacting the machine the browser is running on.
Published: 2018-11-30T19:00:00.000Z
Updated: 2024-08-05T06:37:59.377Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7809 not_vulnerable 2026-06-08 05:12:04.292350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7804 not_vulnerable 2026-06-08 05:12:04.284172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.