CVE:CVE-2015-7937
CNNVD:CNNVD-201512-542
Schneider Electric Modicon M340 PLC BMXNOx和BMXPx都是法国施耐德电气（Schneider Electric）公司的可编程控制器产品。GoAhead Web Server是其中的一款嵌入式Web服务器。
Schneider Electric Modicon M340 PLC BMXNOx和BMXPx设备的GoAhead Web Server中存在基于栈的缓冲区溢出漏洞。远程攻击者可借助HTTP Basic Authentication数据中较长的密码利用该漏洞执行任意代码。
solution:Upgrade schneider-electric bmxnoc0401 to a higher version than -; Upgrade schneider-electric bmxnoe0100 to a higher version than -; Upgrade schneider-electric bmxnoe0100h to a higher version than -; Upgrade schneider-electric bmxnoe0110 to a higher version than -; Upgrade schneider-electric bmxnoe0110h to a higher version than -; Upgrade schneider-electric bmxnor0200 to a higher version than -; Upgrade schneider-electric bmxnor0200h to a higher version than -; Upgrade schneider-electric bmxp342020 to a higher version than -; Upgrade schneider-electric bmxp342020h to a higher version than -; Upgrade schneider-electric bmxp342030 to a higher version than -; Upgrade schneider-electric bmxp3420302 to a higher version than -; Upgrade schneider-electric bmxp3420302h to a higher version than -; Upgrade schneider-electric bmxpra0100 to a higher version than -