Schneider Electric Modicon M340 PLCs Buffer Overflow

Binary data 720075.prm...

Schneider Electric Modicon Multiple Controllers Unverified Password Change

Binary data 720246.prm...

Schneider Electric Modicon Multiple Controllers Basic XSS

Binary data 720249.prm...

Schneider Electric Modicon Modbus Protocol Violation of Secure Design Principles

Binary data 720117.prm...

Schneider Electric Modicon M221 < 1.6.2.0 Password Overwrite

Binary data 720153.prm...

Schneider Electric Modicon M221 < 1.6.2.0 Reversible Password Storage

Binary data 720154.prm...

Schneider Electric Modicon M221 < 1.6.2.0 Information Management Error

Binary data 720152.prm...

Schneider Electric Modicon Multiple Controllers URL Redirection

Binary data 720243.prm...

Schneider Electric 140NOC77100 Modicon Quantum Ethernet/IP Network Interface Module

Binary data 751141.prm...

Schneider Electric Modicon PLCs Predictable Value Range

Binary data 720116.prm...

Schneider Electric Modicon Multiple Controllers Hardcoded Credentials

Binary data 720149.prm...

Schneider Electric 140NOE77111 Modicon Quantum Modbus/TCP Network Interface Module

Binary data 751146.prm...

Schneider Electric Modicon Multiple Controllers Cross-Site Scripting

Binary data 720245.prm...

CVE-2015-6461

Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will resul...

CVE-2015-6462

Reflected Cross-Site Scripting nonpersistent allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H,...

CVE-2015-6462

Reflected Cross-Site Scripting nonpersistent allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H,...

CVE-2015-6462

CVE-2015-6462 describes a reflected Cross-Site Scripting (nonpersistent) vulnerability that can cause arbitrary JavaScript execution in the client browser of Schneider Electric Modicon PLCs when a crafted URL is visited. Affected devices include BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BM...

CVE-2015-6461

Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will resul...

CVE-2015-6461

CVE-2015-6461 affects Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H PLC web servers. The vulnerability is a Remote File Inclusion that allows an attacker to craft a URL causi...

CVE-2015-6461: Improper Control of Filename for Include/Require Statement in PHP Program

Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will resul...