1688 matches found
Design/Logic Flaw
An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials...
CVE-2017-6034 Schneider Electric Modicon Modbus Protocol Authentication Bypass by Capture-replay
An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download...
CVE-2017-6028
An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials...
CVE-2017-6034
CVE-2017-6034 affects Schneider Electric Modicon Modbus Protocol. The vulnerability is an Authentication Bypass by Capture-Replay, enabling an attacker to replay sensitive Modbus commands (run/stop/upload/download) with cleartext traffic and network access. The issue is associated with the Modico...
CVE-2017-6017
A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker...
CVE-2017-6026
Affected products: Schneider Electric Modicon PLCs (M241 and M251) with firmware versions prior to 4.0.5.11. Root cause / vulnerability: Use of insufficiently random values in session numbers generated by the web application, leading to potential session compromise due to shared session identifie...
CVE-2017-6030 Schneider Electric Modicon PLCs Predictable Value Range from Previous Values
A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected...
CVE-2017-6017
The CVE-2017-6017 issue affects Schneider Electric Modicon M340 PLCs (models BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, BMXP342030H). A remote attacker can send s...
CVE-2017-6032
CVE-2017-6032 concerns Schneider Electric Modicon Modbus Protocol: a session-related weakness in Modbus that may allow brute-force-style access. Affected component: Modbus protocol in Schneider Electric Modicon PLCs; impact described as potential exposure of control commands with low to moderate ...
CVE-2017-6030 Schneider Electric Modicon PLCs Predictable Value Range from Previous Values
A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected...
CVE-2017-6030
CVE-2017-6030 affects Schneider Electric Modicon PLCs (M221, M241, M251) with firmware versions prior to 1.5.0.0 (M221) and prior to 4.0.5.11 (M241/M251). The issue is a Predictable Value Range from Previous Values causing insufficiently random TCP initial sequence numbers, enabling an attacker t...
CVE-2017-6028
Schneider Electric Modicon PLCs Modicon M241 (all firmware) and M251 (all firmware) are affected by CVE-2017-6028, where login credentials are transmitted over the network using Base64, enabling sniffing and potential unauthorized web access. No exploits are publicly known in the provided docs. R...
CVE-2017-6026
A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The session numbers generated by the web application are lacking randomization an...
PT-2017-16845
Name of the Vulnerable Software and Affected Versions Schneider Electric Modicon M221 versions prior to 1.5.0.0 Schneider Electric Modicon M241 versions prior to 4.0.5.11 Schneider Electric Modicon M251 versions prior to 4.0.5.11 Description A Predictable Value Range from Previous Values issue wa...
PT-2017-16834 · Schneider Electric · Modicon M340 Plc
Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 PLC versions BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H...
Buffer overflow
A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller...
CVE-2017-7965
A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller...
CVE-2017-7965
A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller...
CVE-2017-7965
CVE-2017-7965 is a stack-based buffer overflow vulnerability in AlTracePrint.exe, part of Schneider Electric SoMachine HVAC programming software (v2.1.0) for Modicon M171/M172 controllers. The issue arises when AlTracePrint.exe is called in a way that could overflow a stack buffer, per CVE-2017-7...