Out-of-Bounds Write in schneider-electric (CVE-2020-7563)
Summary
out-of-bounds write in schneider-electric (CVE-2020-7563). Successful exploitation can lead to full system takeover.
Original description
The description as published by the source.
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.
Source: NIST National Vulnerability Database NVD GitHub Advisory
AI summary
Written by an external AI model and may contain mistakes. Check the original description and references below before acting on it.
A vulnerability tracked as CVE-2020-7563 has been found in schneider-electric.
Successful exploitation can lead to full system takeover. CVSS score: 8.8/10.
What to do: apply the vendor's official patched release.
If unsure, ask your IT team or search "schneider-electric CVE-2020-7563" on the vendor's site.
CVE-2020-7563 (schneider-electric) — CWE-787 / CVSS v3 8.8
Attack vector: remote (network-reachable) / no user interaction
Plan: 1) Audit SBOM/dependencies, 2) Stage→prod upgrade, 3) Add WAF/proxy monitoring on affected endpoints, 4) Hunt IOCs in logs.
Refs: see the GHSA / vendor advisory / patched release linked on this page.
CWE-787: Out-of-bounds Writeの脆弱性
Modicon M340、Modicon Quantum、Modicon Premium Legacy、およびその通信モジュールのWebサーバー
特別に細工されたファイルをFTP経由でアップロードすると、データ破損、クラッシュ、コード実行を引き起こす可能性があります。
Schneider Electricの提供するパッチを適用してください。
情報なし
影響を受ける機器のソフトウェアバージョンを確認し、該当する場合はアップデートを実施してください。
Response actions
Concrete steps and command examples for SOC/SRE teams to execute in order
-
1Identify exposure identify
grep -r 'schneider-electric' . | grep -v node_modulesリポジトリと本番環境の依存ファイル (package-lock.json / requirements.txt / go.sum / Gemfile.lock 等) で
schneider-electricを grep し、稼働しているサービス・バージョンを把握する。 -
7Post-deployment verification verify
Confirm patched version is live in productionパッチ適用後、ステージングで PoC または同等の悪用パターンを再現して脆弱性が閉じたことを確認。本番では Step 3 と同じログクエリでアラート再発が無いか継続監視。
References
- patch se.com
- web nvd.nist.gov
- web se.com
- web github.com