CVE:CVE-2018-7804
CNNVD:CNNVD-201811-087
Schneider Electric Modicon M340等都是法国施耐德电气（Schneider Electric）公司的可编程逻辑控制器产品。
多款Schneider Electric产品中的嵌入式Web服务器存在安全漏洞。攻击者可借助特制的链接利用该漏洞重定向用户至攻击者指定的URL。以下产品受到影响：Schneider Electric Modicon M340；Premium；Quantum PLCs；BMXNOR0200。
solution:Upgrade schneider-electric modicom_m340_firmware to a higher version than *; Upgrade schneider-electric modicom_premium_firmware to a higher version than *; Upgrade schneider-electric modicom_quantum_firmware to a higher version than *; Upgrade schneider-electric modicom_bmxnor0200h_firmware to a higher version than *