Schneider Electric Modicon Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2018-7838)

A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FT...

Siemens EN100 Ethernet Module Improper Neutralization of Input During Web Page Generation (CVE-2019-13943)

A vulnerability has been identified in EN100 Ethernet module DNP3 variant All versions, EN100 Ethernet module IEC 61850 variant All versions V4.37, EN100 Ethernet module IEC104 variant All versions, EN100 Ethernet module Modbus TCP variant All versions, EN100 Ethernet module PROFINET IO variant A...

Mitsubishi Electric MELSEC-Q Series Ethernet Module Uncontrolled Resource Consumption (CVE-2019-10977)

In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to enter an error mode and cause a denial-of-service condition. This plugin only works with Tenable.ot...

Schneider Electric Quantum Ethernet Module Improper Authentication (CVE-2011-4860)

The ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device aka the Quantum 140NOE771 module generates the password for the fwupgrade account by performing a calculation on the MAC address, which makes it easier for remote attackers to obtain access via a ...

Siemens SIPROTEC Information Disclosure (CVE-2016-4785)

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

WISE-4060 Ethernet module Session Management Unauthorized Access

The vulnerability of the WISE-4060 Ethernet module’s microprogramming software is related to session management errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the device remotely...

WISE-4060 Ethernet module Privilege Escalation

The vulnerability of the WISE-4060 Ethernet module’s microprogramming software is related to deficiencies in the password change process via the web server. Exploiting this vulnerability could allow an attacker to gain full access to the device with administrator privileges...

PT-2021-5475

Name of the Vulnerable Software and Affected Versions WISE-4060, Adam-6050 D, Adam.NET Utility affected versions not specified Description The issue is related to a lack of authentication attempt limitations in the Ethernet module software. This could allow a remote attacker to gain full access t...

PT-2021-5473

Name of the Vulnerable Software and Affected Versions WISE-4060 affected versions not specified Description The issue is related to a flaw in the password change procedure via the web server in the WISE-4060 Ethernet module's firmware. This flaw can allow a remote attacker to gain full access to...

PT-2021-5477

Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to a lack of authentication for a critical function in the Ethernet module software, which can be exploited by a remote attacker to cause a denial of...

PT-2021-5465

Name of the Vulnerable Software and Affected Versions WISE-4060 affected versions not specified Description The issue is related to errors in session management within the WISE-4060 Ethernet module's firmware. It allows a remote attacker to exploit the issue and gain unauthorized access to the...

PT-2021-5467

Name of the Vulnerable Software and Affected Versions WISE-4060 affected versions not specified Description The issue is related to the storage of confidential information in an unencrypted manner in the WISE-4060 Ethernet module's firmware. This could allow an attacker to gain full access to the...

PT-2021-5468

Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to shortcomings in the authorization procedure of the Ethernet module's firmware. It allows a remote attacker to gain full access to the device with...

PT-2021-5474

Name of the Vulnerable Software and Affected Versions WISE-4060 affected versions not specified Description The issue is related to the basic HTTP authorization method in the WISE-4060 Ethernet module's web application, which involves the transmission of data in plain text. This could allow a...

CVE-2020-7536

A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs BMXP34 versions prior to V3.30 Modicon M340 Communication Ethernet modules BMXNOE0100 H versions prior to V3.4 BMXNOE0110 H versions prior to V6.6 BMXNOR0200H all versions, that could cause th...

Denial of Service Vulnerability in MITSUBISHI FX3U-ENET-L

FX3U-ENET-L has 4 communication channels. Mitsubishi PLC Ethernet Module FX3U-ENET-L supports fixed buffer storage area communication, connection to MELSOFT, communication via MC series, and e-mail delivery. When connecting to MELSOFT, remote maintenance of PLC programs can be realized through GX...

CVE-2020-7477

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 Versions 7.0 and prior, Quantum processors with integrated Ethernet – 140CPU65xxxxx all Versions, and Premium processors with integrated Ethernet all Versions, which...

PT-2020-19604

Name of the Vulnerable Software and Affected Versions Quantum Ethernet Network module 140NOE771x1 versions 7.0 and prior Quantum processors with integrated Ethernet – 140CPU65xxxxx all versions Premium processors with integrated Ethernet all versions Description A vulnerability exists due to...

CVE-2020-6986

In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period, causing a service error on the PLC Ethernet module, which in turn causes a PLC service denied result...

CVE-2020-6986

In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period, causing a service error on the PLC Ethernet module, which in turn causes a PLC service denied result...