Schneider-electric Modicon Improper Input Validation

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause a possible Denial of Service due to improper data integrity check when sending files the controller over Modbus. File data ot500224.nasl...

Schneider-electric Modicon Missing Authorization

A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to decode the password using rainbow table. File data ot500161.nasl...

Schneider-electric Modicon Exposure of Sensitive Information to an Unauthorized Actor

A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information from the controller when using TFTP protocol. File data ot500182.nasl...

Schneider-electric Modicon Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting XSS vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. File data ot500256.nasl...

Schneider-electric Modicon Improper Check for Unusual or Exceptional Conditions

A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service when sending invalid breakpoint parameters to the controller over Modbus File data ot500315.nasl...

Schneider-electric Modicon Unspecified Vulnerability

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading memory blocks with an invalid data size or with an invalid data offset in the controller over Modbus. File da...

Schneider-electric Modicon Out-of-bounds Read

A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of unexpected data from the controller when reading specific memory blocks in the controller over Modbus. File data...

Schneider-electric Modicon Exposure of Sensitive Information to an Unauthorized Actor

A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbus services provided by the REST API of the controller/communication module. File data ot500293.nas...

Schneider-electric Modicon Improper Authentication

Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors. File data ot500033.nasl...

Chneider-electric Modicon Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103...

Schneider-electric Modicon Improper Input Validation

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when an invalid private command parameter is sent to the controller over Modbus. File data ot500324.nasl...

Schneider-electric Modicon Improper Input Validation

A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause invalid information displayed in Unity Pro software. File data ot500234.nasl...

Schneider-electric Modicon Use of Insufficiently Random Values

A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The session numbers generated by the web application are lacking randomization an...

Schneider Electric Modicon M580/M340/BMxCRA/140CRA Denial of Service Vulnerability (CNVD-2019-41496)

The Modicon M580/M340/BMxCRA/140CRA are programmable logic controllers from Schneider Electric. A denial of service vulnerability exists in the Schneider Electric Modicon M580/M340/BMxCRA/140CRA. An attacker can exploit this vulnerability to cause a denial of service by upgrading the controller...

Schneider Electric Modicon M580/M340/BMxCRA/140CRA Denial of Service Vulnerability (CNVD-2019-41497)

The Modicon M580/M340/BMxCRA/140CRA are programmable logic controllers from Schneider Electric. A denial of service vulnerability exists in the Schneider Electric Modicon M580/M340/BMxCRA/140CRA. An attacker can exploit this vulnerability to cause a denial of service by upgrading the controller v...

Modicon M580/BMENOC 0311/BMENOC 0321 Denial of Service Vulnerability

The Modicon M580/BMENOC 0311/BMENOC 0321 are programmable logic controllers from Schneider Electric. A denial of service vulnerability exists in the Modicon M580/BMENOC 0311/BMENOC 0321. An attacker can exploit this vulnerability to cause a denial of service by sending specific data via the...

Multiple Schneider Products Sensitive Information Plaintext Transfer Vulnerability

The Schneider Electric Modicon M580 is a programmable automation controller from Schneider Electric, France. A sensitive information cleartext transfer vulnerability exists in multiple Schneider products, which can be exploited by an attacker to obtain sensitive information...

Schneider Electric Modicon M580/M340/BMxCRA/140CRA Denial of Service Vulnerability

The Modicon M580/M340/BMxCRA/140CRA are programmable logic controllers from Schneider Electric. A denial of service vulnerability exists in the Schneider Electric Modicon M580/M340/BMxCRA/140CRA. An attacker could use this vulnerability to cause a denial of service by upgrading the firmware via t...

Schneider Electric Modicon M580/BMENOC 0311/BMENOC 0321 Information Disclosure Vulnerability (CNVD-2019-44958)

The Modicon M580/BMENOC 0311/BMENOC 0321 are programmable logic controllers from Schneider Electric. An information disclosure vulnerability exists in the Modicon M580/BMENOC 0311/BMENOC 0321. An attacker could exploit this vulnerability to obtain sensitive information when using certain Modbus...

Schneider Electric Modicon M580/M340/BMxCRA/140CRA Denial of Service Vulnerability (CNVD-2019-41493)

The Modicon M580/M340/BMxCRA/140CRA are programmable logic controllers from Schneider Electric. A denial of service vulnerability exists in the Schneider Electric Modicon M580/M340/BMxCRA/140CRA. An attacker can exploit this vulnerability to cause a denial of service by upgrading the controller v...