Honeywell ControlEdge PLC and ControlEdge RTU Information Disclosure Vulnerability

Honeywell ControlEdge PLC and ControlEdge RTU are both products of Honeywell, Inc. The ControlEdge PLC is a programmable logic controller PLC.The ControlEdge RTU is a remote terminal unit RTU. An information disclosure vulnerability exists in the Honeywell ControlEdge PLC and RTU, which can be...

Schneider Electric Modicon M218 Logic Controller Buffer Overflow Vulnerability

The Schneider Electric Modicon M218 Logic Controller is a programmable logic controller from Schneider Electric France. A buffer overflow vulnerability exists in the Schneider Electric Modicon M218 Logic Controller using firmware version 4.3 and earlier. An attacker can exploit this vulnerability...

CVE-2020-7502

A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller Firmware version 4.3 and prior, which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller...

CVE-2020-7502

A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller Firmware version 4.3 and prior, which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller...

Out-of-bounds

A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller Firmware version 4.3 and prior, which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller...

CVE-2020-7502

CVE-2020-7502 is a documented out-of-bounds write vulnerability (CWE-787) in the Schneider Electric Modicon M218 Logic Controller, affecting firmware versions 4.3 and earlier. The issue arises from an out-of-bounds write in the controller, which may allow a crafted TCP/IP packet sequence to cause...

CVE-2020-7502: Out-of-bounds Write

A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller Firmware version 4.3 and prior, which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller...

Introduction to PLCs and Ladder Logic

Introduction We do a lot of client work with ICS, IIoT, and SCADA. We've been to various power plants, factories, electricity substations and they all use the same technology in the form of a PLC. A PLC is a Programmable Logic Controller. PLCs are what keep our Critical National Infrastructure...

Denial of Service Vulnerability in Proficy Machine Edition

Proficy Machine Edition is a PLC programming software developed by Emerson Trading Shanghai Co. A denial of service vulnerability exists in Proficy Machine Edition, which can be exploited by an attacker to cause a denial of service...

Memory Corruption Vulnerability in Speed Control PLC Development Software

Speed Control Cloud Shanghai Intelligent Technology Co., Ltd, in cooperation with Shanghai Jiao Tong University, is a high-tech company specializing in the research and development of cloud box, HMI, PLC and other industrial Internet of Things automation products. A memory corruption vulnerabilit...

CVE-2020-6081

An exploitable code execution vulnerability exists in the PLCTask functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. A specially crafted network request can cause remote code execution. An attacker can send a malicious packet to trigger this vulnerability...

3S-Smart Software Solutions CODESYS Runtime Remote Code Execution Vulnerability

3S-Smart Software Solutions CODESYS Runtime is a controller real-time runtime system based on IEC61131-3 standard programming from 3S-Smart Software Solutions, Germany. The system transforms any embedded or PC-based device into an IEC61131-3 compliant industrial controller. A security vulnerabili...

Denial of Service Vulnerability in GX Works2 (CNVD-2020-32342)

GX Works2 is a PLC programming software. A denial of service vulnerability exists in GX Works2. An attacker could cause a denial of service by sending constructed malicious packets that cause it to experience an illegal memory access resulting in a denial of service, or could potentially execute...

Denial of Service Vulnerability in GX Works2 (CNVD-2020-28228)

GX Works2 is a PLC programming software. GX Works2 suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

Command Execution Vulnerability in WideField3

WideField3 is a PLC programming software developed by Yokogawa Electric Group. A command execution vulnerability exists in WideField3, which can be exploited by an attacker to execute malicious code...

Multiple Schneider Electric Products Data Forgery Issue Vulnerabilities

Schneider Electric Modicon M218 Logic Controller, etc. are a programmable logic controller from Schneider Electric France. A data forgery vulnerability exists in multiple Schneider Electric products, which can be exploited by attackers to execute malicious code...

Unspecified Vulnerability in Multiple Schneider Electric Products (CNVD-2021-25704)

Schneider Electric Modicon M218 Logic Controller, etc. are a programmable logic controller from Schneider Electric France. A security vulnerability exists in a number of Schneider Electric products, which arises from a program that transmits sensitive information in clear text and can be exploite...

WAGO PFC100 Resource Management Error Vulnerability

The WAGO PFC100 is a programmable logic controller PLC from WAGO Germany. A source management error vulnerability exists in the WAGO PFC100 funding, which can be exploited by an attacker to cause a denial of service...

WAGO PFC 200 Operating System Command Injection Vulnerability

The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. An operating system command injection vulnerability exists in the cloud connectivity feature of the WAGO PFC 200 using firmware versions 03.02.0214, 03.01.0713, and 03.00.3912. The vulnerability stems from a...

Multiple Siemens Products Resource Consumption Vulnerability

Siemens SIMATIC S7-300 CPUs etc. are products of Siemens, Germany.SIMATIC S7-300 CPUs is a CPU Central Processing Unit module.Siemens SIMATIC S7-1200 is a PLC Programmable Logic Controller of the S7-1200 series. Siemens SIMATIC S7-400 is a programmable logic controller for manufacturing and proce...