CVE:CVE-2011-4860
CNNVD:CNNVD-201112-345
NOE 771设备(也称为Quantum 140NOE771* 模块)上的Schneider Electric Quantum Ethernet 模块中的ComputePassword函数中存在漏洞，此函数通过执行MAC地址的计算产生fwupgrade账户密码。远程攻击者可借助(1) ARP 请求信息或者(2) Neighbor Solicitation信息获取访问。
solution:Upgrade schneider-electric quantum_ethernet_module_140noe77100 to a higher version than 3.3,3.4,and avoid the version (,3.3],(,3.4]; Upgrade schneider-electric quantum_ethernet_module_140noe77101 to a higher version than 4.9,and avoid the version (,4.9]; Upgrade schneider-electric quantum_ethernet_module_140noe77111 to a higher version than 5.0,and avoid the version (,5.0]