施耐德(Schneider) Modicon PLC 数据包重放远程控制(Start/Stop Command)

施耐德Modicon系列PLC支持通过Unity Pro软件控制PLC，包括程序的上传下载、设备的启动关闭等管理员权限操作。该软件与PLC设备的通信无加密与身份认证，可进行数据包重放攻击。抓包分析：远程关闭设备：说明：该攻击通过以下POC实现较为容易，攻击能使得远程PLC直接停止运行，可能会对目标所在工业运行环境造成严重后果。可以通过pocsuite去验证漏洞存在，验证模式不会对设备造成影响，建议不要轻易尝试攻击。切记。...

Schneider Electric StruxureWare Building Expert Security Patch

Industrial control manufacturer Schneider Electric has published new firmware for its StruxureWare Building Expert building automation system that patches a remotely exploitable vulnerability. Researcher Artyom Kurbatov discovered that the system transmits user credentials in plaintext between th...

Schneider Electric Modicon PLC File Containment Vulnerability

Modicon PLCs are programmable controller products used in industries such as dams, energy, food and agriculture, and more. Modicon PLCs are implemented with a file inclusion vulnerability that can be exploited by an attacker to construct a specific URL that can be used to load Java script through...

Schneider Electric Modicon PLC Cross-Site Scripting Vulnerability

Modicon PLCs are programmable controller products used in industries such as dams, energy, food and agriculture, and more. A cross-site scripting vulnerability exists in the implementation of Modicon PLC, which can be exploited by an attacker to construct a specific URL and execute arbitrary Java...

Schneider Electric Modicon M340 PLC Station P34模块Web Servers安全漏洞

漏洞详情：Schneider Electric Modicon M340 PLC Station P34 module是法国施耐德电气（Schneider Electric）公司的一款可编程控制器。Schneider Electric Modicon M340 PLC Station P34模块中存在安全漏洞。远程攻击者可利用该漏洞获取敏感信息，在Web服务器进程上下文中执行任意代码，绕过身份验证机制，获取受影响设备的访问权限。漏洞类型远程利用影响硬编码身份认证是远程代码执行本地文件包含否目录遍历/文件篡改远程代码包含是远程代码执行/拒绝服务攻击跨站脚本攻击是获取敏感信息影响设备版本：...

Multiple Vulnerabilities in Schneider Electric Modicon M340 PLC Station P34 Module Modicon

The Schneider Electric Modicon M340 PLC is a mid-sized PLC platform for industrial processes and architectures. Multiple security vulnerabilities exist in the Modicon M340 PLC Station P34 module. Exploitation of these vulnerabilities could allow a remote attacker to obtain sensitive information o...

Schneider Electric Modicon M340 PLC Station P34 Module HMI Vulnerabilities

Update Vulnerabilities in Schneider Electric SCADA gear remain unpatched close to two weeks after they were disclosed during DEF CON. The Industrial Control System Cyber Emergency Response Team ICS-CERT released an alert late last week and patches are currently being validated according to ICS-CE...

Schneider Electric Modicon PLC Vulnerabilities

OVERVIEW This advisory is a follow-up to the alert titled ICS-ALERT-15-224-02 Schneider Electric Modicon M340 PLC Station P34 Module VulnerabilitiesICS-CERT ALERT, https://ics-cert.us-cert.gov/alerts/ICS-ALERT-15-224-02, web site last accessed September 3, 2015. that was published August 12, 2015...

Multiple Schneider Electric Modicon M340 Ethernet Modules Remote Denial of Service

Binary data 7161.pasl...

Multiple Schneider Electric Modicon PLC Modules Directory Traversal

Binary data 7154.pasl...

Schneider Electric Modicon TSX Micro PLC Detection

Binary data 7153.pasl...

Schneider Electric Modicon M340 PLC Detection

Binary data 7150.pasl...

Schneider Electric Modicon Quantum PLC Detection

Binary data 7149.pasl...

Schneider Electric Modicon Premium PLC Detection

Binary data 7151.pasl...

CVE-2014-0754

Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103...

Directory traversal

Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103...

CVE-2014-0754 Schneider Electric

Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103...

CVE-2014-0754

CVE-2014-0754 is a directory traversal vulnerability in Schneider Electric Modicon PLC Ethernet modules (SchneiderWEB). Affected Exec firmware/versions include 140CPU65x before 5.5, 140NOC78x before 1.62, 140NOE77x before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x before 6.0,...

PT-2014-3817 · Schneider Electric · Modicon Plc Ethernet Modules +1

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec versions prior to 5.5 Schneider Electric Modicon PLC Ethernet modules 140NOC78x Exec versions prior to 1.62 Schneider Electric Modicon PLC Ethernet modules 140NOE77x Exec versions...

Default FTP Credentials (ntpupdate / ntpupdate)

It is possible to log into the remote FTP server by providing default credentials. A remote attacker could exploit this to gain access to the remote server. These credentials are known to apply to Schneider Electric Modicon M340 for Ethernet devices; however, they may apply to other FTP services ...