VULNERABILITY INTELLIGENCE

CVE-2013-0663

CVSS score6.8 MEDIUM
EPSS probability5.96%
CISA KEVNot currently listed
Published2013-04-04
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote attackers to hijack the authentication of arbitrary users for requests that execute commands, as demonstrated by modifying HTTP credentials.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references