Lucene search

K
nessusThis script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500052.NASL
HistoryNov 08, 2019 - 12:00 a.m.

Schneider-electric Modicon Improper Input Validation

2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
9

0.001 Low

EPSS

Percentile

42.7%

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause a Denial of Service attack on the PLC when sending specific data on the REST API of the controller/communication module.

File data ot_500052.nasl
VendorProductVersionCPE
schneider-electricmodicon_m580_firmware-cpe:2.3:o:schneider-electric:modicon_m580_firmware:-:*:*:*:*:*:*:*
schneider-electricmodicon_m580-cpe:2.3:h:schneider-electric:modicon_m580:-:*:*:*:*:*:*:*
schneider-electricmodicon_bmenoc_0311_firmware-cpe:2.3:o:schneider-electric:modicon_bmenoc_0311_firmware:-:*:*:*:*:*:*:*
schneider-electricmodicon_bmenoc_0311-cpe:2.3:h:schneider-electric:modicon_bmenoc_0311:-:*:*:*:*:*:*:*
schneider-electricmodicon_bmenoc_0321_firmware-cpe:2.3:o:schneider-electric:modicon_bmenoc_0321_firmware:-:*:*:*:*:*:*:*
schneider-electricmodicon_bmenoc_0321-cpe:2.3:h:schneider-electric:modicon_bmenoc_0321:-:*:*:*:*:*:*:*

0.001 Low

EPSS

Percentile

42.7%

Related for OT_500052.NASL