Schneider Electric Modicon M340 缓冲区错误漏洞

The Schneider Electric Modicon M340 is a mid-range PLC Programmable Logic Controller for industrial processes and infrastructure from Schneider Electric France. The Schneider Electric Modicon M340 suffers from a buffer error vulnerability that originates from improperly restricted memory buffer...

Schneider Electric Modicon M340 安全漏洞

The Schneider Electric Modicon M340 is a medium-range PLC programmable logic controller for industrial processes and infrastructure from Schneider Electric, France. A security vulnerability exists in the Schneider Electric Modicon M340 that arises from improper implementation of message integrity...

Schneider Electric Modicon M340 安全漏洞

The Schneider Electric Modicon M340 is a mid-range PLC Programmable Logic Controller for industrial processes and infrastructure from Schneider Electric France. A security vulnerability exists in the Schneider Electric Modicon M340 that stems from the presence of an authentication bypass via...

PT-2024-9212 · Schneider Electric · Modicon M340 Cpu Bmxp34

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 CPU BMXP34 affected versions not specified Description: The issue is related to insufficient input validation in the Modbus protocol implementation of the Schneider Electric Modicon M340 CPU BMXP34 programmable...

PT-2024-9214 · Schneider Electric · Schneider Electric Modicon M340 Cpu Bmxp34

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 CPU BMXP34 affected versions not specified Description: The issue is related to an authentication bypass vulnerability in the Diffie-Hellman algorithm, which can be exploited to conduct a Man-In-The-Middle atta...

PT-2024-8142 · Schneider Electric · Schneider Electric Modicon Mc80 Bmkc80 +2

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 CPU BMXP34 versions affected versions not specified Schneider Electric Modicon MC80 BMKC80 versions affected versions not specified Schneider Electric Modicon Momentum Unity M1E Processor 171CBU versions affect...

PT-2024-9215 · Schneider Electric · Modicon Mc80 Bmkc80 +2

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 CPU BMXP34, Modicon MC80 BMKC80, and Modicon Momentum Unity M1E Processor 171CBU affected versions not specified Description: The issue is related to the lack of message integrity checks during transmission ove...

PT-2024-9213 · Schneider Electric · Modicon Mc80 Bmkc80 +2

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 CPU BMXP34, Modicon MC80 BMKC80, and Modicon Momentum Unity M1E Processor 171CBU affected versions not specified Description: A vulnerability exists that could cause a potential arbitrary code execution after a...

Schneider Modicon Remote START/STOP Command

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Schneider Modicon Remote START/STOP Command', 'Description' = %q The Schneider Modicon with Unity series of PLCs use Modbus function code 90 0x5a...

Schneider Modicon Ladder Logic Upload/Download

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Schneider Modicon Ladder Logic Upload/Download', 'Description' = %q The Schneider Modicon with Unity series of PLCs use Modbus function code 90...

Schneider Modicon Quantum Password Recovery

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Schneider Modicon Quantum Password Recovery', 'Description' = %q The Schneider Modicon Quantum series of Ethernet cards store usernames and...

Information Disclosure Vulnerability in Modicon TM221 at Schneider Electric (China) Co.

The Modicon TM221 is a programmable controller for single device control architecture from Schneider Electric China Co. An information disclosure vulnerability exists in the Modicon TM221 from Schneider Electric China Ltd. that can be exploited by an attacker to obtain sensitive information...

The vulnerability of microprogrammed software in Modicon Controllers allows a hacker to perform a cross-site scripting attack.

The vulnerability of Microprogrammed Software on Modicon Controllers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack remotely...

Schneider Electric Modicon Controllers Improper Neutralization of Input During Web Page Generation (CVE-2024-6528)

CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause a vulnerability leading to a cross-site scripting condition where attackers can have a victim's browser run arbitrary JavaScript when they visit a page containing the...

Schneider Electric Modicon Controllers 跨站脚本漏洞

Schneider Electric China Co., Ltd. is a globalized electrical company and a global expert in energy efficiency management and automation. An XSS vulnerability exists in Schneider Electric China TM241CE24TU, which can be exploited by attackers to obtain sensitive information such as user cookies...

PT-2024-5156 · Schneider Electric · Modicon Controllers

Name of the Vulnerable Software and Affected Versions: Modicon Controllers affected versions not specified Description: A cross-site scripting condition exists due to improper neutralization of input during web page generation. This could allow an attacker to have a victim's browser run arbitrary...

The vulnerability of the microprogramming software of Schneider Electric’s programmable logic controller Modicon M340 and its network modules, Modicon M340 BMXNOE0100, Modicon M340 BMXNOE0110, stems from the use of files and directories accessible to external parties. This allows attackers to disrupt the device’s firmware updates and cause improper operation of the web server.

The vulnerability of the microprogramming software of Schneider Electric’s programmable logic controller Modicon M340, as well as its network modules Modicon M340 BMXNOE0100 and Modicon M340 BMXNOE0110, stems from the use of files and directories accessible to external parties. Exploiting this...

Schneider Electric Modicon M340 Denial of Service Vulnerability

The Schneider Electric Modicon M340 is a mid-range PLC programmable logic controller for industrial processes and infrastructure from Schneider Electric, France. A denial of service vulnerability exists in the Schneider Electric Modicon M340, which can be exploited by an attacker to prevent a use...

Schneider Electric Modicon M340 安全漏洞

The Schneider Electric Modicon M340 is a mid-range PLC programmable logic controller for industrial processes and infrastructure from Schneider Electric, France. A denial of service vulnerability exists in the Schneider Electric Modicon M340, which can be exploited by an attacker to prevent a use...

Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110 (Update A)

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...