CVE-2011-4859

CRITICAL

The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the S...

Affects 21 products across 1 vendor.

BCS8.33
CVSS 2.010.0
EPSS3.9%
Percentile89th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity.
◆ SAGE Intelligence — CITED Relevance Research Team

The Schneider Electric Quantum Ethernet Module, used in various models, has hardcoded passwords for multiple accounts, allowing remote attackers to gain unauthorized access via TELNET, Windriver Debug, or FTP ports. This vulnerability poses a significant risk to the operational integrity and security of affected systems.

BSID: BS-2011-GLOBAL-316559-C • Model: Qwen/Qwen2.5-72B-Instruct-AWQ • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2011-4859?
The Schneider Electric Quantum Ethernet Module, used in various models, has hardcoded passwords for multiple accounts, allowing remote attackers to gain unauthorized access via TELNET, Windriver Debug, or FTP ports. This vulnerability poses a significant risk to the operational integrity and security of affected systems.
What is the CVSS score for CVE-2011-4859?
CVE-2011-4859 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 3.9%.
Is CVE-2011-4859 actively exploited?
No confirmed active exploitation of CVE-2011-4859 as of 2026-05-30.
How do I remediate CVE-2011-4859?
Priority: IMMEDIATE.
What systems are affected by CVE-2011-4859?
CVE-2011-4859 affects: Schneider-Electric, Schneider-Electric, Schneider-Electric, Schneider-Electric, Schneider-Electric, Schneider-Electric, Schneider-Electric, Schneider-Electric.
What NERC-CIP standard applies to CVE-2011-4859?
NERC CIP CIP-007 CIP-007-R2: This CVE violates CIP-007-R2 because it involves unauthorized access to critical cyber assets, which can compromise the reliability and security of the bulk electric system.
What IEC 62443 requirement maps to CVE-2011-4859?
IEC 62443 SR 7.6: This CVE maps to SR 7.6 because it involves the use of hardcoded credentials, which can be exploited to gain unauthorized access to the system, violating the principle of secure authentication and authorization.
Vulnerability Details
CVE IDCVE-2011-4859
BSIDBS-2011-GLOBAL-316559-C BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Published2011-12-17
Last Modified2026-04-29
ICS Relevance55%
Verticals
ICS-OT
SourceNVD
Official Description

The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Remote attackers can exploit the hardcoded passwords to gain unauthorized access to the Schneider Electric Quantum Ethernet Module via TELNET, Windriver Debug, or FTP ports. This can lead to full control over the device, potentially compromising the entire network and leading to data theft, system manipulation, or denial of service.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductFixed Version
Schneider-Electric Quantum Ethernet Module 140Cpu65150
Schneider-Electric Quantum Ethernet Module 140Cpu65160
Schneider-Electric Quantum Ethernet Module 140Cpu65260
Schneider-Electric Quantum Ethernet Module 140Noe77100
Schneider-Electric Quantum Ethernet Module 140Noe77101
Schneider-Electric Quantum Ethernet Module 140Noe77111
Schneider-Electric Premium Ethernet Module Tsxety4103
Schneider-Electric Premium Ethernet Module Tsxety5103
Schneider-Electric Premium Ethernet Module Tsxp57163M
Schneider-Electric Premium Ethernet Module Tsxp572634M
Schneider-Electric Premium Ethernet Module Tsxp573634M
Schneider-Electric Premium Ethernet Module Tsxp574634M
Schneider-Electric Premium Ethernet Module Tsxp575634M
Schneider-Electric Premium Ethernet Module Tsxp576634M
Schneider-Electric M340 Ethernet Module Bmxnoe0100
Schneider-Electric M340 Ethernet Module Bmxnoe0110
Schneider-Electric M340 Ethernet Module Bmxp342020
Schneider-Electric M340 Ethernet Module Bmxp342030
Schneider-Electric Stb Dio Ethernet Module Stbnic2212
Schneider-Electric Stb Dio Ethernet Module Stbnip2212
Schneider-Electric Stb Dio Ethernet Module Stbnip2311
Remediation

No patch URL on record. Monitor vendor security advisories directly.

Threat Intelligence
● Threat Intelligence Validated: August 2026 | Threat Age: 5345 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
● Virtual Patch — CITED Relevance SAGE Engine MEDIUM CONFIDENCE

Implement strong access controls and change default passwords immediately. Use network segmentation to isolate critical systems from untrusted networks.

SURICATA RULE
alert tcp any any -> any 23 (msg:"Hardcoded password access attempt on TELNET"; content:"AUTCSE"; nocase; sid:9100010; rev:1;)
NERC CIP: CIP-007 CIP-007-R2
This CVE violates CIP-007-R2 because it involves unauthorized access to critical cyber assets, which can compromise the reliability and security of the bulk electric system.
IEC 62443: SR 7.6
This CVE maps to SR 7.6 because it involves the use of hardcoded credentials, which can be exploited to gain unauthorized access to the system, violating the principle of secure authentication and authorization.

Virtual patch generated by CITED Relevance SAGE. Validate in isolated environment before production deployment. Compensating control only - does not replace vendor patch.

SAGE Enrichment Record — provenance & audit hash
ModelQwen/Qwen2.5-72B-Instruct-AWQ
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash83ec99151dfe40e878856b8fe6314f04f2c1cf6f007aec4a82701a50589976b13c1f23f91f1682e5353517138e620fad1d60fb44b1c9ff7922c6da2af54a32f6
Related CVEs affecting Schneider-Electric
CVE-2013-3075 10.0 Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3... CVE-2011-4861 10.0 The modbus_125_handler function in the Schneider Electric Quantum Ethernet Mo... CVE-2011-4860 10.0 The ComputePassword function in the Schneider Electric Quantum Ethernet Modul... CVE-2020-11897 10.0 The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multipl... CVE-2020-11896 10.0 The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related ...
View all Schneider-Electric CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →