CVE-2018-7241
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340,...
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.
- Record
CVE-2018-7241- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-798
- Updated
- 2026-11-02
CVE List No score
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.
- Record
CVE-2018-7241- Updated
- 2026-11-02
EUVDEUVD-2018-18980 No score
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.
- Record
EUVD-2018-18980- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rhfc-jm87-h52j
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340,...
Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules.
- Record
GHSA-rhfc-jm87-h52j- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-798
- Updated
- 2026-11-02
Affected products
- schneider electric se modicon premium, modicon quantum, modicon m340, bmxnor0200
- schneider-electric 140cpu31110 firmware
- schneider-electric 140cpu31110c firmware
- schneider-electric 140cpu43412u firmware
- schneider-electric 140cpu43412uc firmware
- schneider-electric 140cpu65150 firmware
- schneider-electric 140cpu65150c firmware
- schneider-electric 140cpu65160 firmware
- schneider-electric 140cpu65160c firmware
- schneider-electric 140cpu65160s firmware
- schneider-electric 140cpu65260 firmware
- schneider-electric 140cpu65260c firmware
Show 46 moreShow less
- schneider-electric 140cpu65860 firmware
- schneider-electric 140cpu65860c firmware
- schneider-electric bmxnor0200 firmware
- schneider-electric bmxnor0200h firmware
- schneider-electric modicon m340 bmxp341000 firmware
- schneider-electric modicon m340 bmxp341000h firmware
- schneider-electric modicon m340 bmxp342000 firmware
- schneider-electric modicon m340 bmxp3420102 firmware
- schneider-electric modicon m340 bmxp3420102cl firmware
- schneider-electric modicon m340 bmxp342020 firmware
- schneider-electric modicon m340 bmxp342020h firmware
- schneider-electric modicon m340 bmxp3420302 firmware
- schneider-electric modicon m340 bmxp3420302cl firmware
- schneider-electric modicon m340 bmxp3420302h firmware
- schneider-electric tsxh5724m firmware
- schneider-electric tsxh5724mc firmware
- schneider-electric tsxh5744m firmware
- schneider-electric tsxh5744mc firmware
- schneider-electric tsxp57104m firmware
- schneider-electric tsxp57104mc firmware
- schneider-electric tsxp57154m firmware
- schneider-electric tsxp57154mc firmware
- schneider-electric tsxp571634m firmware
- schneider-electric tsxp571634mc firmware
- schneider-electric tsxp57204m firmware
- schneider-electric tsxp57204mc firmware
- schneider-electric tsxp57254m firmware
- schneider-electric tsxp57254mc firmware
- schneider-electric tsxp572634m firmware
- schneider-electric tsxp572634mc firmware
- schneider-electric tsxp57304m firmware
- schneider-electric tsxp57304mc firmware
- schneider-electric tsxp57354m firmware
- schneider-electric tsxp57354mc firmware
- schneider-electric tsxp573634m firmware
- schneider-electric tsxp573634mc firmware
- schneider-electric tsxp57454m firmware
- schneider-electric tsxp57454mc firmware
- schneider-electric tsxp574634m firmware
- schneider-electric tsxp574634mc firmware
- schneider-electric tsxp57554m firmware
- schneider-electric tsxp57554mc firmware
- schneider-electric tsxp575634m firmware
- schneider-electric tsxp575634mc firmware
- schneider-electric tsxp576634m firmware
- schneider-electric tsxp576634mc firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-7241 is a critical vulnerability (CVSS 9.8) in Schneider Electric Se Modicon Premium, Modicon Quantum, Modicon M340, Bmxnor0200, published April 18, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.70%, the 89th percentile. No source names a fixed version.