CVE-2011-4859
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65*...
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.
Exploit likelihood
What each source reports
NVD Score used
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.
- Record
CVE-2011-4859- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.
- Record
CVE-2011-4859- Updated
- 2026-11-02
EUVDEUVD-2011-4776 No score
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.
- Record
EUVD-2011-4776- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wrpc-6j6r-gh72 No score
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65*...
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.
- Record
GHSA-wrpc-6j6r-gh72- Updated
- 2026-11-02
Affected products
- schneider-electric m340 ethernet module bmxnoe0100
- schneider-electric m340 ethernet module bmxnoe0110
- schneider-electric m340 ethernet module bmxp342020
- schneider-electric m340 ethernet module bmxp342030
- schneider-electric premium ethernet module tsxety4103
- schneider-electric premium ethernet module tsxety5103
- schneider-electric premium ethernet module tsxp57163m
- schneider-electric premium ethernet module tsxp572634m
- schneider-electric premium ethernet module tsxp573634m
- schneider-electric premium ethernet module tsxp574634m
- schneider-electric premium ethernet module tsxp575634m
- schneider-electric premium ethernet module tsxp576634m
Show 9 moreShow less
- schneider-electric quantum ethernet module 140cpu65150
- schneider-electric quantum ethernet module 140cpu65160
- schneider-electric quantum ethernet module 140cpu65260
- schneider-electric quantum ethernet module 140noe77100
- schneider-electric quantum ethernet module 140noe77101
- schneider-electric quantum ethernet module 140noe77111
- schneider-electric stb dio ethernet module stbnic2212
- schneider-electric stb dio ethernet module stbnip2212
- schneider-electric stb dio ethernet module stbnip2311
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4859 is a high vulnerability (CVSS 10.0) in Schneider-electric M340 Ethernet Module Bmxnoe0100, published December 17, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.89%, the 90th percentile. No source names a fixed version.
References
us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf
reversemode.com/index.php?option=com_content&task=view&id=80&Itemid=1
securityfocus.com/bid/51605
secunia.com/advisories/47723
exchange.xforce.ibmcloud.com/vulnerabilities/72587
nvd.nist.gov/vuln/detail/CVE-2011-4859
github.com/advisories/GHSA-wrpc-6j6r-gh72