CVE-2022-34764

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service when parsing the URL. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V1.0, OPC UA Modicon Communication Module BMENUA0100 V1.10 and prio...

CVE-2022-34760

A CWE-835: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability exists that could cause a denial of service of the webserver due to improper handling of the cookies. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V1.0, OPC UA Modicon Communication Module...

PT-2022-3627

Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module versions V1.0 OPC UA Modicon Communication Module versions V1.10 and prior Description A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer issue exists that could cause denia...

PT-2022-3625

Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module versions 2.01 and later OPC UA Modicon Communication Module versions 1.10 and prior Description A vulnerability exists due to insufficient verification of data authenticity, which could cause the loading o...

PT-2022-3630

Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module BMENOR2200H version V1.0 OPC UA Modicon Communication Module BMENUA0100 versions V1.10 and prior Description A vulnerability exists due to improper parsing of the HTTP Headers, which could cause a denial o...

PT-2022-3628

Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module versions 2.01 and later OPC UA Modicon Communication Module versions 1.10 and prior Description A NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when...

PT-2022-3631

Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module versions V1.0 OPC UA Modicon Communication Module versions V1.10 and prior Description A Loop with Unreachable Exit Condition 'Infinite Loop' issue exists due to improper handling of cookies, which could...

PT-2022-3629

Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module BMENOR2200H versions V2.01 and later OPC UA Modicon Communication Module BMENUA0100 versions V1.10 and prior Description A path traversal vulnerability exists that could cause unauthorized firmware image...

PT-2022-3626

Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module versions 2.01 and later OPC UA Modicon Communication Module versions 1.10 and prior Description A vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is...

The vulnerability of the programming software simulator PLC EcoStruxure Control Expert, the automation system ProcessExpert, the configuration software SCADAPack RemoteConnect, and the micro-software for programmable logic controllers Modicon M580 and Modicon M340 relates to the bypassing of authentication procedures. This allows a perpetrator to gain access in read-only and write mode.

The vulnerabilities of the EcoStruxure Control Expert programming tool, the ProcessExpert automation system, the SCADAPack RemoteConnect configuration tool, and the Modicon M580 and Modicon M340 programmable logic controllers are related to the ability to bypass authentication through spoofing...

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium arises from buffer overflows in the stack, allowing attackers to execute arbitrary commands.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium arises due to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely by...

Vulnerability fixed in Schneider Electric Modicon M340

Schneider Electric has fixed a vulnerability in the Modicon M340 controllers. An unauthenticated remote malicious person could potentially exploit the vulnerability to cause a denial-of-service cause in the controller's Ethernet interface by sending a specific SNMP request. Schneider Electric has...

PT-2022-3762 · Schneider Electric · Modicon M340 Cpu +4

Name of the Vulnerable Software and Affected Versions: Modicon M340 CPUs versions prior to V3.40 Modicon M340 X80 Ethernet Communication modules: BMXNOE0100 H, BMXNOE0110 H BMXNOE all versions BMXNOR versions prior to v1.7 IR24 Description: A vulnerability exists that could cause a denial of...

CVE-2022-24323

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...

CVE-2022-24322

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software when an attacker is able to intercept and manipulate specific Modbus response data...

CVE-2022-24323

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...

CVE-2022-24322

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software when an attacker is able to intercept and manipulate specific Modbus response data...

CVE-2022-24323

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...

Design/Logic Flaw

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software when an attacker is able to intercept and manipulate specific Modbus response data...

CVE-2022-24323

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...