CVE-2019-6819

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the controller in the products: Modicon M340 - firmware versions prior to V3.01, Modicon M580 - firmware versions prior to...

CVE-2019-6821

CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum...

CVE-2019-6821

CVE-2019-6821 affects Schneider Electric Modicon devices: M580 firmware versions before 2.30 (and M580 M340/Premium/Quantum family). The vulnerability is CWE-330: Use of Insufficiently Random Values, causing predictable TCP initial sequence numbers that can enable an attacker to hijack TCP connec...

CVE-2019-6820

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration IP address, network mask and gateway IP address when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC...

CVE-2019-6820

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration IP address, network mask and gateway IP address when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC...

CVE-2019-6820

CVE-2019-6820 describes a CWE-306 vulnerability (Missing Authentication for a Critical Function) that could allow modification of device IP configuration (IP address, netmask, gateway) when a specific Ethernet frame is received on multiple Schneider Electric Modicon/drive products. Affected produ...

CVE-2018-7823

A Environment CWE-2 vulnerability exists in SoMachine Basic, all versions, and Modicon M221all references, all versions prior to firmware V1.10.0.0 which could cause remote launch of SoMachine Basic when sending crafted ethernet message...

CVE-2018-7823

CVE-2018-7823 affects Schneider Electric SoMachine Basic (all versions) and Modicon M221 prior to firmware v1.10.0.0, with a vulnerability that could cause remote launch of SoMachine Basic when a crafted Ethernet message is sent. Public sources in the connected documents confirm the affected prod...

CVE-2018-7822

An Incorrect Default Permissions CWE-276 vulnerability exists in SoMachine Basic, all versions, and Modicon M221all references, all versions prior to firmware V1.10.0.0 which could cause unauthorized access to SoMachine Basic resource files when logged on the system hosting SoMachine Basic...

CVE-2018-7822

The CVE-2018-7822 entry describes an Incorrect Default Permissions (CWE-276) vulnerability in Schneider Electric SoMachine Basic (all versions) and Modicon M221 prior to firmware v1.10.0.0. The root cause is improper default permissions on SoMachine Basic resource files on the system hosting SoMa...

CVE-2018-7821

An Environment CWE-2 vulnerability exists in SoMachine Basic, all versions, and Modicon M221all references, all versions prior to firmware V1.10.0.0 which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated...

CVE-2018-7821

CVE-2018-7821 affects Schneider Electric SoMachine Basic (all versions) and Modicon M221 prior to firmware v1.10.0.0. The root cause is an environment-type vulnerability that could cause a cycle time impact by flooding the M221 Ethernet interface when the Ethernet/IP adapter is activated. The con...

CVE-2018-7821

An Environment CWE-2 vulnerability exists in SoMachine Basic, all versions, and Modicon M221all references, all versions prior to firmware V1.10.0.0 which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated...

Access Control Error Vulnerability in Multiple Schneider Electric Products

Schneider Electric Modicon M100 is a programmable logic controller, Schneider Electric Modicon LMC078 is a motion controller, and Schneider Electric ATV IMC drive controller is a drive controller. Schneider Electric Modicon M100 is a programmable logic controller.Schneider Electric Modicon LMC078...

Modicon M580/M340/Premium/Quantum Insufficient Random Value Usage Vulnerability

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

Schneider Electric Modicon Out-of-Bounds Write Denial of Service Vulnerability

The Schneider Electric Modicon M580, M340 is a programmable automation controller. An out-of-bounds write vulnerability exists in the Schneider Electric Modicon M580, M340, which allows remote attackers to exploit the vulnerability by submitting a special request, which can be used in a...

PT-2019-11108

Name of the Vulnerable Software and Affected Versions: Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description: A CWE-248: Uncaught Exception issue exists...

Denial of Service Vulnerability in Multiple Schneider Electric Products (CNVD-2019-15737)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

CVE-2018-7848: Exposure of Sensitive Information to an Unauthorized Actor

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading files from the controller over Modbus...

CVE-2018-7821: Allocation of Resources Without Limits or Throttling

An Environment CWE-2 vulnerability exists in SoMachine Basic, all versions, and Modicon M221all references, all versions prior to firmware V1.10.0.0 which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated...