Is CVE-2014-0754 being actively exploited?

CVE-2014-0754 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2014-0754?

CVE-2014-0754 has a CVSS 2.0 base score of 10.0 (HIGH).

CVE-2014-0754

HIGH · CVSS 10.0EPSS 9.5%EU EUVD

Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7, TSXETY5103x Exec before 5.9, TSXP57x ETYPort Exec before 5.7, and TSXP57x Ethernet Copro Exec before 5.5 allows remote attackers to visit arbitrary resources via a crafted HTTP request.

Key facts

CVSS score: 10.0 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness (CWE): CWE-22
EPSS score: 9.5% (95th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2014-0785)
Published: October 3, 2014
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2014-0785 in the EU Vulnerability Database. Last updated in EUVD on August 25, 2025.

View on the EU Vulnerability Database

Affected products

schneider-electric / 171ccc96020
schneider-electric / 171ccc96020 firmware
schneider-electric / 171ccc96020c
schneider-electric / 171ccc96020c firmware
schneider-electric / 171ccc96030
schneider-electric / 171ccc96030 firmware
schneider-electric / 171ccc96030c
schneider-electric / 171ccc96030c firmware
schneider-electric / 171ccc98020
schneider-electric / 171ccc98020 firmware
schneider-electric / 171ccc98030
schneider-electric / 171ccc98030 firmware
schneider-electric / modicon m340 bmxnoc0401
schneider-electric / modicon m340 bmxnoc0401 firmware
schneider-electric / modicon m340 bmxnoe0100
schneider-electric / modicon m340 bmxnoe0100 firmware
schneider-electric / modicon m340 bmxnoe0110
schneider-electric / modicon m340 bmxnoe0110 firmware
schneider-electric / modicon m340 bmxnoe0110h
schneider-electric / modicon m340 bmxnoe0110h firmware
schneider-electric / modicon m340 bmxnor0200h
schneider-electric / modicon m340 bmxnor0200h firmware
schneider-electric / modicon m340 bmxp342020
schneider-electric / modicon m340 bmxp342020 firmware
schneider-electric / modicon m340 bmxp342020h
schneider-electric / modicon m340 bmxp342020h firmware
schneider-electric / modicon m340 bmxp342030
schneider-electric / modicon m340 bmxp342030 firmware
schneider-electric / modicon m340 bmxp3420302
schneider-electric / modicon m340 bmxp3420302 firmware
schneider-electric / modicon m340 bmxp3420302h
schneider-electric / modicon m340 bmxp3420302h firmware
schneider-electric / modicon m340 bmxp342030h
schneider-electric / modicon m340 bmxp342030h firmware
schneider-electric / modicon m580 bmxnoc0402
schneider-electric / modicon m580 bmxnoc0402 firmware
schneider-electric / stbnic2212
schneider-electric / stbnic2212 firmware
schneider-electric / stbnip2212
schneider-electric / stbnip2212 firmware
schneider-electric / tsxetc0101
schneider-electric / tsxetc0101 firmware
schneider-electric / tsxetc100
schneider-electric / tsxetc100 firmware
schneider-electric / tsxety110ws
schneider-electric / tsxety110ws firmware
schneider-electric / tsxety110wsc
schneider-electric / tsxety110wsc firmware
schneider-electric / tsxety4103
schneider-electric / tsxety4103 firmware

and 36 more…

References

http://download.schneider-electric.com/files?p_Reference=SEVD-2014-260-01&p_EnDocType=Software%20-%20Updates&p_File_Id=608959359&p_File_Name=SEVD-2014-260-01.pdf(Patch, Vendor Advisory)
http://www.securityfocus.com/bid/70193(Third Party Advisory, VDB Entry)
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2014-260-01
https://ics-cert.us-cert.gov/advisories/ICSA-14-273-01(Third Party Advisory, US Government Resource)
https://www.cisa.gov/news-events/ics-advisories/icsa-14-273-01

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain