Is CVE-2011-4859 actively exploited?

No active exploitation of CVE-2011-4859 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2011-4859 be exploited remotely?

Yes. CVE-2011-4859 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2011-4859?

CVE-2011-4859 has a CVSS score of 10.0 (CRITICAL).

HOME VULNERABILITIESCVE-2011-4859

CRITICAL

CVE-2011-4859

NVD-CWE-OtherPublished: December 17, 2011· Updated: Jun 16, 2026

10.0

CVSS v3.1

Official Description

The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.

NVD Source

Technical Analysis

CVE-2011-4859 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.

User Interaction

Scope

Impact

ConfidentialityC

IntegrityC

AvailabilityC

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected Vendors & Products

schneider-electric21 product(s)

quantum ethernet module 140cpu65150quantum ethernet module 140cpu65160quantum ethernet module 140cpu65260quantum ethernet module 140noe77100quantum ethernet module 140noe77101quantum ethernet module 140noe77111premium ethernet module tsxety4103premium ethernet module tsxety5103premium ethernet module tsxp57163mpremium ethernet module tsxp572634mpremium ethernet module tsxp573634mpremium ethernet module tsxp574634m+9

Source: NVD CPE · 21 total CPE entries