CVE-2019-6851: Insertion of Sensitive Information into Externally-Accessible File or Directory

A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information from the controller when using TFTP protocol...

CVE-2019-6848: Improper Handling of Exceptional Conditions

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU BMEx58 and Modicon M580 communication module BMENOC0311, BMENOC0321 see notification for version info, which could cause a Denial of Service attack on the PLC when sending specific data on the REST API...

CVE-2019-6841: Improper Handling of Exceptional Conditions

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware version prior to V3.10, Modicon M340 all firmware versions, and Modicon BMxCRA and 140CRA modules all firmware versions, which could cause a Denial of Service attack on the PLC when upgrading...

CVE-2019-6845: Cleartext Transmission of Sensitive Information

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol...

Vulnerability spotlight: Multiple vulnerabilities in Schneider Electric Modicon M580

Jared Rittle and Patrick DeSantis of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. There are several vulnerabilities in the Schneider Electric Modicon M580 that could lead to a variety of conditions, the majority of which can cause a denial of service. The Modicon M580 is the...

PT-2019-3830

Name of the Vulnerable Software and Affected Versions Modicon M580 all firmware versions Modicon M340 all firmware versions Modicon BMxCRA all firmware versions 140CRA all firmware versions Description A vulnerability exists in the Modicon controllers' firmware, related to the improper handling o...

PT-2019-3833

Name of the Vulnerable Software and Affected Versions Modicon M580 all firmware versions Modicon M340 all firmware versions Modicon BMxCRA all firmware versions 140CRA all firmware versions Description A vulnerability exists in the Modicon controllers' firmware, related to the improper handling o...

PT-2019-3856

Name of the Vulnerable Software and Affected Versions Modicon M580 all firmware versions Modicon M340 all firmware versions Modicon BMxCRA all firmware versions Modicon 140CRA all firmware versions Description The issue is related to the transmission of sensitive information in plaintext using th...

PT-2019-3832

Name of the Vulnerable Software and Affected Versions Modicon M580 all firmware versions Modicon M340 all firmware versions Modicon BMxCRA all firmware versions 140CRA all firmware versions Description A vulnerability exists in the Modicon controllers due to the lack of integrity check of the...

Schneider Electric Modicon M580 outdated firmware image FTP upgrade denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the FTP firmware update functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.80. An outdated firmware image can cause the device to enter a non-recoverable fault state,...

Schneider Electric Modicon M580 malformed firmware image FTP upgrade denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the FTP firmware update function of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.80. A specially crafted firmware image can cause the device to enter a recoverable fault state, resulti...

Schneider Electric Modicon M580 UMAS REST API getcominfo information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS REST API getcominfo functionality of the Schneider Electric Modicon M580 Programmable Automation Controller firmware version SV2.80. A specially crafted HTTP request can cause the device to return arbitrary memory,...

Schneider Electric Modicon M580 FTP cleartext authentication vulnerability

Summary An exploitable information disclosure vulnerability exists in the FTP functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.80. An attacker can sniff network traffic to exploit this vulnerability. Tested Versions Schneider Electric...

Schneider Electric Modicon M580 FTP incomplete firmware update denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the FTP firmware update function of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.80. A specially crafted set of FTP commands can cause the device to enter a recoverable fault state,...

Schneider Electric Modicon M580 UMAS REST API readbolarray information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS REST API readbolarray functionality of the Schneider Electric Modicon M580 Programmable Automation Controller firmware version SV2.80. A specially crafted HTTP request can cause the device to return blocks of program...

Schneider Electric Modicon M580 UMAS REST API getcominfo denial-of-service vulnerability

Summary An exploitable denial of service vulnerability exists in the UMAS REST API getcominfo functionality of the Schneider Electric Modicon M580 Programmable Automation Controller firmware version SV2.80. A specially crafted HTTP request can cause the device to enter a non-recoverable fault...

Schneider Electric Modicon M580 UMAS cleartext data transmission vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.80. An attacker can sniff network traffic to exploit this vulnerability. Tested Versions Schneider Electric...

PT-2019-3857

Name of the Vulnerable Software and Affected Versions Modicon M580 all firmware versions Modicon M340 all firmware versions Modicon Premium all firmware versions Modicon Quantum all firmware versions Description A Cleartext Transmission of Sensitive Information issue exists, which could cause the...

PT-2019-3831

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to V3.10 Modicon M340 all firmware versions Modicon BMxCRA and 140CRA modules all firmware versions Description A vulnerability exists in the Modicon controllers due to the lack of integrity check of the firmware...

PT-2019-3848

Name of the Vulnerable Software and Affected Versions Modicon M580 versions affected versions not specified Modicon BMENOC 0311 versions affected versions not specified Modicon BMENOC 0321 versions affected versions not specified Description The issue is related to the use of REST API read regist...