AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-7809

CRITICAL · CVSS 9.8 EPSS 2.47%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-11-30 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2018-7809
Severity
CRITICAL
CVSS
9.8
EPSS
2.47%

Original NVD Description

An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the password delete function of the web server.