description: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a denial of service can occur for ~1 minute by sending a specially crafted HTTP request.
problem types: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
affected:
{
product: Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200
vendor: Schneider Electric SE
versions:
status: affected, version: Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200
}