High severity8.8NVD Advisory· Published Nov 30, 2018· Updated Jun 17, 2026

CVE-2018-7831

Description

An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to send a specially crafted URL to a currently authenticated web server user to execute a password change on the web server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Schneider Electric/Modicon M340llm-fuzzy
Schneider Electric SE/Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200v5
Range: Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200

Patches

Vulnerability mechanics

References

www.tenable.com/security/research/tra-2018-38nvdExploitThird Party Advisory
www.schneider-electric.com/en/download/document/SEVD-2018-327-01/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000