45 matches found
CVE-2020-28220: Improper Restriction of Operations within the Bounds of a Memory Buffer
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Modicon M258 Firmware All versions prior to V5.0.4.11 and SoMachine/SoMachine Motion software All versions, that could cause a buffer overflow when the length of a file transferred to the...
PT-2020-16950
Name of the Vulnerable Software and Affected Versions Modicon M258 Firmware versions prior to V5.0.4.11 SoMachine/SoMachine Motion software affected versions not specified Description A buffer overflow issue exists due to improper restriction of operations within the bounds of a memory buffer. Th...
CVE-2020-7487
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers...
CVE-2020-7488
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers...
Design/Logic Flaw
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers...
CVE-2020-7488
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers...
Design/Logic Flaw
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers...
CVE-2020-7488
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers...
CVE-2020-7488
The CVE-2020-7488 issue concerns a CWE-319 vulnerability (Cleartext Transmission of Sensitive Information) that could leak sensitive data transmitted between Schneider Electric’s Modicon controllers (M218, M241, M251, M258) and associated software. The root cause is insecure cleartext transmissio...
CVE-2020-7488: Cleartext Transmission of Sensitive Information
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers...
CVE-2020-7487: Insufficient Verification of Data Authenticity
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers...
PT-2020-6343
Name of the Vulnerable Software and Affected Versions Modicon M218, M241, M251, and M258 affected versions not specified Description The issue is related to insufficient verification of data authenticity, which could allow a remote attacker to execute arbitrary code on the affected controllers...
Authentication flaw
A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration IP address, network mask and gateway IP address when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC...
CVE-2019-6820
A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration IP address, network mask and gateway IP address when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC...
CVE-2019-6820
CVE-2019-6820 describes a CWE-306 vulnerability (Missing Authentication for a Critical Function) that could allow modification of device IP configuration (IP address, netmask, gateway) when a specific Ethernet frame is received on multiple Schneider Electric Modicon/drive products. Affected produ...
CVE-2019-6820: Missing Authentication for Critical Function
A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration IP address, network mask and gateway IP address when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC...
Schneider Electric Modicon M258 PLC Detection
Binary data 751051.prm...
Schneider Electric Modicon M258 TM258LD42DT PLC Detection
Binary data 751177.prm...