CVE-2011-4859
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the S...
Affects 57 products across 1 vendor.
The Schneider Electric Quantum Ethernet Module, used in various models, has hardcoded passwords for multiple accounts, allowing remote attackers to gain unauthorized access via TELNET, Windriver Debug, or FTP ports. This vulnerability poses a significant risk to the operational integrity and security of affected systems.
BSID: BS-2011-GLOBAL-316559-C • Model: Qwen/Qwen2.5-72B-Instruct-AWQ • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2011-4859?
What is the CVSS score for CVE-2011-4859?
Is CVE-2011-4859 actively exploited?
How do I remediate CVE-2011-4859?
What systems are affected by CVE-2011-4859?
What NERC-CIP standard applies to CVE-2011-4859?
What IEC 62443 requirement maps to CVE-2011-4859?
| CVE ID | CVE-2011-4859 |
|---|---|
| BSID | BS-2011-GLOBAL-316559-C BreachSpider Global ID |
| CVSS Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Published | 2011-12-17 |
| Last Modified | 2026-06-16 |
| ICS Relevance | 55% |
| Verticals | |
| Source | NVD |
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.
Source: NIST NVD / MITRE CVE Database
Remote attackers can exploit the hardcoded passwords to gain unauthorized access to the Schneider Electric Quantum Ethernet Module via TELNET, Windriver Debug, or FTP ports. This can lead to full control over the device, potentially compromising the entire network and leading to data theft, system manipulation, or denial of service.
Exploitation Likelihood: CRITICAL
| Vendor | Product | Affected Versions |
|---|---|---|
| Schneider-Electric | Quantum Ethernet Module 140Cpu65150 | ≤ 3.5 |
| Schneider-Electric | Quantum Ethernet Module 140Cpu65160 | ≤ 3.5 |
| Schneider-Electric | Quantum Ethernet Module 140Cpu65260 | ≤ 3.5 |
| Schneider-Electric | Quantum Ethernet Module 140Noe77100 | ≤ 3.4 |
| Schneider-Electric | Quantum Ethernet Module 140Noe77101 | ≤ 4.9 |
| Schneider-Electric | Quantum Ethernet Module 140Noe77111 | ≤ 5.0 |
| Schneider-Electric | Premium Ethernet Module Tsxety4103 | ≤ 5.0 |
| Schneider-Electric | Premium Ethernet Module Tsxety5103 | ≤ 5.0 |
| Schneider-Electric | Premium Ethernet Module Tsxp57163M | ≤ 4.9 |
| Schneider-Electric | Premium Ethernet Module Tsxp572634M | ≤ 4.9 |
| Schneider-Electric | Premium Ethernet Module Tsxp573634M | ≤ 4.9 |
| Schneider-Electric | Premium Ethernet Module Tsxp574634M | ≤ 3.5 |
| Schneider-Electric | Premium Ethernet Module Tsxp575634M | ≤ 3.5 |
| Schneider-Electric | Premium Ethernet Module Tsxp576634M | ≤ 3.5 |
| Schneider-Electric | M340 Ethernet Module Bmxnoe0100 | ≤ 2.3 |
| Schneider-Electric | M340 Ethernet Module Bmxnoe0110 | ≤ 4.65 |
| Schneider-Electric | M340 Ethernet Module Bmxp342020 | 3.50 < 3.50 ≤ 2.2 |
| Schneider-Electric | M340 Ethernet Module Bmxp342030 | 3.50 < 3.50 ≤ 2.2 |
| Schneider-Electric | Stb Dio Ethernet Module Stbnic2212 | ≤ 2.10 |
| Schneider-Electric | Stb Dio Ethernet Module Stbnip2212 | ≤ 2.73 |
| Schneider-Electric | Stb Dio Ethernet Module Stbnip2311 | ≤ 3.01 |
| Schneider-Electric | Stbnic2212 (device & firmware) | ≤ 2.10 |
| Schneider-Electric | Stbnip2212 (device & firmware) | ≤ 2.73 |
| Schneider-Electric | Tsxp574634M (device & firmware) | ≤ 3.5 |
| Schneider-Electric | Tsxety4103 (device & firmware) | ≤ 5.0 |
| Schneider-Electric | Tsxety5103 (device & firmware) | ≤ 5.0 |
| Schneider-Electric | Tsxp575634M (device & firmware) | ≤ 3.5 |
| Schneider-Electric | Tsxp571634M (device & firmware) | ≤ 4.9 |
| Schneider-Electric | Tsxp572634M (device & firmware) | ≤ 4.9 |
| Schneider-Electric | Tsxp573634M (device & firmware) | ≤ 4.9 |
| Schneider-Electric | Bmxnoc0401 (device & firmware) | ≤ 1.01 |
| Schneider-Electric | Bmxnoe0100 (device & firmware) | ≤ 2.3 |
| Schneider-Electric | Bmxnoe0110 (device & firmware) | ≤ 4.65 |
| Schneider-Electric | 140Cpu65150 (device & firmware) | ≤ 3.5 |
| Schneider-Electric | 140Cpu65160 (device & firmware) | ≤ 3.5 |
| Schneider-Electric | 140Cpu65260 (device & firmware) | ≤ 3.5 |
| Schneider-Electric | 140Noe77101 (device & firmware) | ≤ 4.9 |
| Schneider-Electric | 140Noe77111 (device & firmware) | ≤ 5.0 |
| Schneider-Electric | 140Noc77101 (device & firmware) | ≤ 1.01 |
| Schneider-Electric | Tsxp576634M (device & firmware) | ≤ 3.5 |
No patch URL on record. Monitor vendor security advisories directly.
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
Implement strong access controls and change default passwords immediately. Use network segmentation to isolate critical systems from untrusted networks.
This CVE violates CIP-007-R2 because it involves unauthorized access to critical cyber assets, which can compromise the reliability and security of the bulk electric system.
This CVE maps to SR 7.6 because it involves the use of hardcoded credentials, which can be exploited to gain unauthorized access to the system, violating the principle of secure authentication and authorization.
Drafted by AI and not validated for your network. Test in an isolated environment before any production deployment. Compensating control only - does not replace vendor patch.
AI Enrichment Record — provenance & audit hash
| Model | Qwen/Qwen2.5-72B-Instruct-AWQ |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 83ec99151dfe40e878856b8fe6314f04f2c1cf6f007aec4a82701a50589976b13c1f23f91f1682e5353517138e620fad1d60fb44b1c9ff7922c6da2af54a32f6 |
Critical Severity - Know Your Exposure
A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →