Schneider-electric Modicon Cleartext Transmission of Sensitive Information

2019-11-0800:00:00

www.tenable.com

0.002 Low

EPSS

Percentile

54.0%

JSON

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol.

File data ot_500304.nasl

VendorProductVersionCPE
schneider-electricmodicon_m580_firmware*cpe:2.3:o:schneider-electric:modicon_m580_firmware:*:*:*:*:*:*:*:*
schneider-electricmodicon_m580-cpe:2.3:h:schneider-electric:modicon_m580:-:*:*:*:*:*:*:*
schneider-electricmodicon_m340_firmware*cpe:2.3:o:schneider-electric:modicon_m340_firmware:*:*:*:*:*:*:*:*
schneider-electricmodicon_m340-cpe:2.3:h:schneider-electric:modicon_m340:-:*:*:*:*:*:*:*
schneider-electrictsxmcpc002m_firmware*cpe:2.3:o:schneider-electric:tsxmcpc002m_firmware:*:*:*:*:*:*:*:*
schneider-electrictsxmcpc002m-cpe:2.3:h:schneider-electric:tsxmcpc002m:-:*:*:*:*:*:*:*
schneider-electrictsxmcpc512k_firmware*cpe:2.3:o:schneider-electric:tsxmcpc512k_firmware:*:*:*:*:*:*:*:*
schneider-electrictsxmcpc512k-cpe:2.3:h:schneider-electric:tsxmcpc512k:-:*:*:*:*:*:*:*
schneider-electrictsxmfpp001m_firmware*cpe:2.3:o:schneider-electric:tsxmfpp001m_firmware:*:*:*:*:*:*:*:*
schneider-electrictsxmfpp001m-cpe:2.3:h:schneider-electric:tsxmfpp001m:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
schneider-electric	modicon_m580_firmware	*	cpe:2.3:o:schneider-electric:modicon_m580_firmware::::::::
schneider-electric	modicon_m580	-	cpe:2.3:h:schneider-electric:modicon_m580:-:::::::*
schneider-electric	modicon_m340_firmware	*	cpe:2.3:o:schneider-electric:modicon_m340_firmware::::::::
schneider-electric	modicon_m340	-	cpe:2.3:h:schneider-electric:modicon_m340:-:::::::*
schneider-electric	tsxmcpc002m_firmware	*	cpe:2.3:o:schneider-electric:tsxmcpc002m_firmware::::::::
schneider-electric	tsxmcpc002m	-	cpe:2.3:h:schneider-electric:tsxmcpc002m:-:::::::*
schneider-electric	tsxmcpc512k_firmware	*	cpe:2.3:o:schneider-electric:tsxmcpc512k_firmware::::::::
schneider-electric	tsxmcpc512k	-	cpe:2.3:h:schneider-electric:tsxmcpc512k:-:::::::*
schneider-electric	tsxmfpp001m_firmware	*	cpe:2.3:o:schneider-electric:tsxmfpp001m_firmware::::::::
schneider-electric	tsxmfpp001m	-	cpe:2.3:h:schneider-electric:tsxmfpp001m:-:::::::*