Critical severity9.8NVD Advisory· Published Dec 1, 2020· Updated Jun 17, 2026
CVE-2020-7533
CVE-2020-7533
Description
CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests.
Affected products
16- cpe:2.3:o:schneider-electric:140cpu65260_firmware:*:*:*:*:*:*:*:*Range: <6.1
- cpe:2.3:o:schneider-electric:140noc77101_firmware:*:*:*:*:*:*:*:*Range: <1.08
- cpe:2.3:o:schneider-electric:140noc78000_firmware:*:*:*:*:*:*:*:*Range: <1.74
- cpe:2.3:o:schneider-electric:140noe77111_firmware:*:*:*:*:*:*:*:*Range: <7.1
- cpe:2.3:o:schneider-electric:bmxnoc0401_firmware:*:*:*:*:*:*:*:*Range: <2.10
- cpe:2.3:o:schneider-electric:bmxnoe0100_firmware:*:*:*:*:*:*:*:*Range: <3.3
- cpe:2.3:o:schneider-electric:bmxnoe0110_firmware:*:*:*:*:*:*:*:*Range: <6.5
- cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000_firmware:*:*:*:*:*:*:*:*Range: <3.20
cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:*:*:*:*:*:*:*:*range: <3.20
- cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302_firmware:*:*:*:*:*:*:*:*range: <3.20
- cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102_firmware:*:*:*:*:*:*:*:*Range: <3.20
- cpe:2.3:o:schneider-electric:tsxety4103_firmware:*:*:*:*:*:*:*:*Range: <6.2
- cpe:2.3:o:schneider-electric:tsxety5103_firmware:*:*:*:*:*:*:*:*Range: <6.4
cpe:2.3:o:schneider-electric:tsxp574634_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:schneider-electric:tsxp574634_firmware:*:*:*:*:*:*:*:*range: <6.1
- cpe:2.3:o:schneider-electric:tsxp575634_firmware:*:*:*:*:*:*:*:*range: <6.1
- cpe:2.3:o:schneider-electric:tsxp576634_firmware:*:*:*:*:*:*:*:*Range: <6.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.