CVE-2020-7477

high

Published 2020-03-23 · Modified 2026-05-28

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v4 NEW

—

not yet in upstream

VIR risk

7.5

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 (Versions 7.0 and prior), Quantum processors with integrated Ethernet – 140CPU65xxxxx (all Versions), and Premium processors with integrated Ethernet (all Versions), which could cause a Denial of Service when sending a specially crafted command over Modbus.

Predictions

Exploit likelihood

83%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Application impact

Vendor	Product	Versions
schneider-electric	140noe77101	`-`
schneider-electric	140noe77111	`-`
schneider-electric	tsxh5744m	`-`
schneider-electric	tsxh5724m	`-`
schneider-electric	tsxp576634m_	`-`
schneider-electric	tsxp57554m	`-`
schneider-electric	tsxp575634m	`-`
schneider-electric	tsxp57454m	`-`
schneider-electric	tsxp574634m	`-`
schneider-electric	tsxp573634m	`-`
schneider-electric	tsxp57304m	`-`
schneider-electric	tsxp57254m	`-`
schneider-electric	tsxp572634m	`-`
schneider-electric	tsxp57204m_	`-`
schneider-electric	tsxp571634m	`-`
schneider-electric	tsxp57154m	`-`
schneider-electric	tsxp57104m	`-`
schneider-electric	140cpu65150	`-`
schneider-electric	140cpu65160	`-`
schneider-electric	140cpu65260	`-`
schneider-electric	140cpu67261	`-`
schneider-electric	140cpu67060	`-`
schneider-electric	140cpu67160	`-`
schneider-electric	140cpu67260	`-`
schneider-electric	140cpu65860	`-`
schneider-electric	140cpu67861	`-`
schneider-electric	140cpu65160s	`-`
schneider-electric	140cpu67160s	`-`

References

https://www.se.com/ww/en/download/document/SEVD-2020-070-02/

CWEs

CWE-754

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.