CVE-2014-0754 - CVE House
Back to Database
Status published Critical CVE-2014-0754

Schneider Electric

Vulnerability Description

Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-0754

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Billy Rios

References

More from Schneider Electric

View All →
CVE-2025-9997
CWE-78: Improper Neutralization of Special Elements used in an OS...
Medium 5.8
CVE-2025-9996
CWE-78: Improper Neutralization of Special Elements used in an OS...
Medium 5.8
CVE-2025-8453
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege...
High 8.4
CVE-2025-7746
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...
Medium 5.3
CVE-2025-6788
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists...
Medium 5.3

Affected Vendor

Schneider Electric

View all reports →

Affected Software

Ethernet modules for M340, Quantum and Premium PLC ranges
Vulnerable Versions:
140CPU65150, 140CPU65160, 140CPU65260, 140NOC77100, 140NOC78000, 140NOC78100, 140NOE77100, 140NOE77101, 140NOE77101C, 140NOE77110, 140NOE77111, 140NOE77111C, 140NWM10000, 170ENT11001, 170ENT11002, 170ENT11002C, 171CCC96020, 171CCC96020C, 171CCC96030, 171CCC96030C, 171CCC98020, 171CCC98030, BMXNOC0401, BMXNOC0402, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, BMXP342030H, BMXPRMxxxx, STBNIC2212, STBNIP2212, TSXETC0101, TSXETC100, TSXETY110WS, TSXETY110WSC, TSXETY4103, TSXETY4103C, TSXETY5103, TSXETY5103C, TSXETZ410, TSXETZ510, TSXNTP100, TSXP572623M, TSXP572623MC, TSXP572823M, TSXP572823MC, TSXP573623AM, TSXP573623M, TSXP573623MC, TSXP574634M, TSXP574823AM, TSXP574823M, TSXP574823MC, TSXP575634M, TSXP576634M, TSXWMY100, TSXWMY100C, TSXP571634M, TSXP572634M, TSXP573634M

Timeline

Official Publish: October 3rd, 2014
Last Modified: August 25th, 2025
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.