多芬诺针对Schneider Quantum PLC漏洞推出解决方案_Schneider_Quantum

多芬诺针对Schneider Quantum PLC漏洞推出解决方案

2012/7/24 11:12:33

据US-CERT（美国计算机应急响应小组）SB11-360和SB12-037公告称，schneider-electric的quantum 以太网模块和PLC存在着漏洞，部分公告内容如下：
Bulletin (SB11-360)
Vulnerability Summary for the Week of December 19, 2011

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
schneider-electric -- m340_ethernet_module_bmxnoe0100	The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.	2011-12-17	10.0	CVE-2011-4859
schneider-electric -- quantum_ethernet_module_140noe77100	The Compute Password function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) generates the password for the fwupgrade account by performing a calculation on the MAC address, which makes it easier for remote attackers to obtain access via a (1) ARP request message or (2) Neighbor Solicitation message.	2011-12-17	10.0	CVE-2011-4860
schneider-electric -- quantum_ethernet_module_140noe77100	The modbus_125_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) allows remote attackers to install arbitrary firmware updates via a MODBUS 125 function code to TCP port 502.	2011-12-17	10.0	CVE-2011-4861

Bulletin (SB12-037)
Vulnerability Summary for the Week of January 30, 2012

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
schneider-electric -- modicon_quantum_plc	Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the (1) FTP server or (2) HTTP server.	2012-01-27	7.8	CVE-2012-0929
schneider-electric -- modicon_quantum_plc	Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.	2012-01-27	7.8	CVE-2012-0931
schneider-electric -- modicon_quantum_plc	Cross-site scripting (XSS) vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	2012-01-27	4.3	CVE-2012-0930