CVE-2018-7849

CVE-2018-7849 受影响的产品 Schneider Electric Modicon M580 版本 2.90 Schneider Electric Modicon M340 版本 3.10 Schneider Electric Modicon Premium 所有版本 Schneider Electric Modicon Quantum 所有版本 参考链接 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7852

CVE-2018-7852 受影响的产品 施耐德电气 Modicon M580 版本 2.80 施耐德电气 Modicon M340 版本 3.01 施耐德电气 Modicon Premium 版本 3.20 施耐德电气 Modicon Quantum 版本 3.60 参考 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2019-0763 用法 python CVE-2018-7852.py...

CVE-2018-7854

CVE-2018-7854 影響を受ける製品 Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 参考文献 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2019-0765 使用方法 python CVE-2018-7854.py --host 192.168.1.1...

CVE-2018-7846

CVE-2018-7846 影響を受ける製品 Schneider Electric Modicon M580 バージョン 2.90 未満 Schneider Electric Modicon M340 バージョン 3.10 未満 Schneider Electric Modicon Premium 全バージョン Schneider Electric Modicon Quantum 全バージョン 参考文献 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7844

CVE-2018-7844 影響を受ける製品 Schneider Electric Modicon M580 全バージョン Schneider Electric Modicon M340 全バージョン Schneider Electric Modicon Premium 全バージョン Schneider Electric Modicon Quantum 全バージョン 参照 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7843

CVE-2018-7843 受影响产品 Schneider Electric Modicon M580 版本 2.80 Schneider Electric Modicon M340 版本 3.10 Schneider Electric Modicon Premium 版本 3.20 Schneider Electric Modicon Quantum 版本 3.60 参考链接 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7848

CVE-2018-7848 受影响产品 施耐德电气 Modicon M580 版本 2.90 施耐德电气 Modicon M340 版本 3.10 施耐德电气 Modicon Premium 所有版本 施耐德电气 Modicon Quantum 所有版本 参考 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2018-0740 使用方法 python CVE-2018-7848.py --hos...

CVE-2018-7845

CVE-2018-7845 受影响的产品 施耐德电气 Modicon M580 版本 2.80 施耐德电气 Modicon M340 版本 3.01 施耐德电气 Modicon Premium 版本 3.20 施耐德电气 Modicon Quantum 版本 3.60 参考文献 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2018-0745 使用方法 python...

CVE-2018-7842

CVE-2018-7842 影響を受ける製品 Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium 全バージョン Schneider Electric Modicon Quantum 全バージョン 参考情報 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

PT-2026-89045

News: Schneider Electric, Siemens, and Aveva ship ICS Patch Tuesday. Worst new hit: Modicon M580 auth CVE-2026-3869 CVSS 9.2. Siemens flags critical Reyrolle 7SR5, OIS, Industrial Edge bugs. OT owners: patch controllers now. https://t.co/TT7I5NW8Ee...

Schneider Electric Modicon Controllers M241, M251, M258, and LMC058 Improper Neutralization of Input During Web Page Generation (CVE-2025-13902)

CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause condition where authenticated attackers can have a victim's browser run arbitrary JavaScript when the victim hovers over a maliciously crafted element on a web server...

Schneider Electric Modicon M241, M251, and M262 Improper Resource Shutdown or Release (CVE-2025-13901)

CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels. This plugin only works with Tenable.ot. Please visit...

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers Modicon M241, Modicon M251, and Modicon M262 arises from improper cleaning or release of resources, allowing a intruder to trigger malfunctions during maintenance.

The vulnerability of microprogrammed software in Schneider Electric’s Modicon M241, Modicon M251, and Modicon M262 programmable logic controllers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system remote...

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers, such as Modicon M241, Modicon M251, Modicon M258, and Modicon LMC058, stems from the lack of protective measures for website structures. This allows attackers to perform cross-site scripting attacks.

The vulnerability of microprogrammed software in Schneider Electric’s Modicon M241, Modicon M251, Modicon M258, and Modicon LMC058 programmable logic controllers is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to...

Schneider Electric多款产品 安全漏洞

Schneider Electric Modicon M241, among others, are programmable logic controllers produced by Schneider Electric, a French company. Several products from Schneider Electric have security vulnerabilities. These vulnerabilities stem from improper resource closure or release procedures, which may...

Schneider Electric多款产品 跨站脚本漏洞

Schneider Electric Modicon M258 is a product of the French company Schneider Electric. Schneider Electric Modicon M258 is a programmable automation controller. Schneider Electric Modicon M241 is a programmable logic controller. Schneider Electric Modicon M251 is also a programmable logic...

CVE-2021-22792

A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU par...

CVE-2021-22785

A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 Versions prior to V3.40, Modicon M340 X...

CVE-2021-22749

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior that could cause information leak concerning the current RTU configuration including communication parameters dedicated to telemetry, when a specially...

CVE-2021-22790

A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU part...