CVE-2020-7562

CVE-2020-7562

Vendor N/A

Product Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details)

Weakness CWE-125

Published November 18, 2020

Last update May 29, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause a segmentation fault or a buffer overflow when uploading a specially crafted file on the controller over FTP.

Key dates

02Disclosure timeline

November 18, 2020 CVE published

May 29, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-7562 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/125.html

Related vulnerabilities

Identifiers

CVE CVE-2020-7562

CWE CWE-125

Affected versions

Vendor N/A

Product Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details)

Affected Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communicatio

01Description

02Disclosure timeline

03References

04Related CVE