VULNERABILITY INTELLIGENCE

CVE-2018-7804

CVSS score6.1 MEDIUM
EPSS probability0.86%
CISA KEVNot currently listed
Published2018-12-17
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially crafted link can be redirected to a URL of the attacker's choosing.

Weakness classification

  • CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Primary references