CVE:CVE-2020-7534
CNNVD:CNNVD-202202-341
Schneider Electric Modicon Quantum等都是法国施耐德电气（Schneider Electric）公司的产品。Schneider Electric Modicon Quantum是一款用于过程应用、高可用性和安全解决方案的大型可编程逻辑控制器（PLC）。Schneider Electric Modicon M340是一款用于工业过程和基础设施的中程PLC（可编程逻辑控制器）。Schneider Electric Modicon Premium是一个应用于工业环境的可编程控制器。
Schneider Electric 多款产品存在跨站请求伪造漏洞，该漏洞源于WEB服务器缺少对于跨站请求伪造的验证。该漏洞可能导致用户登录时web服务器上的敏感数据或未经授权的操作泄漏。
solution:Upgrade schneider-electric bmxp342020_firmware to a higher version than *; Upgrade schneider-electric 140cpu65_firmware to a higher version than *; Upgrade schneider-electric tsxp57_firmware to a higher version than *; Upgrade schneider-electric bmxnoc0401_firmware to a higher version than *; Upgrade schneider-electric bmxnoe01_firmware to a higher version than *; Upgrade schneider-electric bmxnor0200h_firmware to a higher version than *; Upgrade schneider-electric 140noe77111_firmware to a higher version than *; Upgrade schneider-electric 140noc78000_firmware to a higher version than *; Upgrade schneider-electric tsxety5103_firmware to a higher version than *; Upgrade schneider-electric tsxety4103_firmware to a higher version than *