Lucene search

K
nessusThis script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500209.NASL
HistoryNov 08, 2019 - 12:00 a.m.

Schneider-electric Modicon Improper Control of Generation of Code ('Code Injection')

2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
12

0.001 Low

EPSS

Percentile

48.1%

In Modicon Quantum all firmware versions, a CWE-94: Code Injection vulnerability could cause an unauthorized firmware modification with possible Denial of Service when using Modbus protocol.

File data ot_500209.nasl
VendorProductVersionCPE
schneider-electricmodicon_quantum_firmware*cpe:2.3:o:schneider-electric:modicon_quantum_firmware:*:*:*:*:*:*:*:*
schneider-electricmodicon_quantum-cpe:2.3:h:schneider-electric:modicon_quantum:-:*:*:*:*:*:*:*

0.001 Low

EPSS

Percentile

48.1%

Related for OT_500209.NASL