description: A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.
problem types: CWE-200: Information Exposure
affected:
{
product: Modicon Controllers (M340 CPUs, M340 communication modules,  Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions)
vendor: Schneider Electric
versions:
status: affected, version: Modicon Controllers (M340 CPUs
status: affected, version: M340 communication modules
status: affected, version: Premium CPUs
status: affected, version: Premium communication modules
status: affected, version: Quantum CPUs
status: affected, version: Quantum communication modules - see security notification for specific versions)
}