CVE-2020-7540

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules see security notification for affected versions, that could cause unauthenticated command executio...

CVE-2020-7539

CVE-2020-7539 affects the Web Server in Schneider Electric Modicon M340, and legacy Modicon Quantum/Premium with related Communication Modules. The root cause is CWE-754: improper check for unusual or exceptional conditions, leading to denial of service when a specially crafted HTTP packet is sen...

CVE-2020-7539

A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules see security notification for affected versions, that could cause a denial of service...

CVE-2020-7537

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium see security notifications for affected versions, that could cause denial of service when a specially crafted Read Physical Memo...

CVE-2020-7537

CVE-2020-7537 affects Schneider Electric Modicon M580, M340, and legacy Quantum/Premium controllers. The root cause is an improper check for unusual or exceptional conditions (CWE-754) that can allow a remote attacker to trigger denial of service by sending a specially crafted Read Physical Memor...

CVE-2020-7535

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' Vulnerability Type vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules see security notification for affected versions,...

CVE-2020-7535

CVE-2020-7535 describes a CWE-22 path traversal vulnerability in the Web Server of Schneider Electric Modicon M340, including Legacy Offers Modicon Quantum and Modicon Premium and related Communication Modules. The Red Hat/NVD entries and vendor advisories reiterate that sending a specially craft...

CVE-2020-7536

A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs BMXP34 versions prior to V3.30 Modicon M340 Communication Ethernet modules BMXNOE0100 H versions prior to V3.4 BMXNOE0110 H versions prior to V6.6 BMXNOR0200H all versions, that could cause th...

CVE-2020-7536

CVE-2020-7536 affects Schneider Electric Modicon M340: CPUs (BMXP34* pre-V3.30) and Ethernet modules BMXNOE0100(H) pre-V3.4, BMXNOE0110(H) pre-V6.6, BMXNOR0200H all versions. Root cause: CWE-754 Improper Check for Unusual or Exceptional Conditions, leading to device unreachability when SNMP param...

PT-2020-19620 · Schneider Electric · Modicon M580 +3

Name of the Vulnerable Software and Affected Versions: Modicon M580 affected versions not specified Modicon M340 affected versions not specified Legacy Controllers Modicon Quantum affected versions not specified Legacy Controllers Modicon Premium affected versions not specified Description: A...

PT-2020-19625

Name of the Vulnerable Software and Affected Versions Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description A vulnerability exists in the Web Server of the affected device...

PT-2020-19621 · Schneider Electric · Modicon M580 +3

Name of the Vulnerable Software and Affected Versions: Modicon M580 affected versions not specified Modicon M340 affected versions not specified Legacy Controllers Modicon Quantum affected versions not specified Legacy Controllers Modicon Premium affected versions not specified Description: A...

Schneider Electric Modicon M340 代码问题漏洞

The Schneider Electric Modicon M340 is a mid-range PLC programmable logic controller for industrial processes and infrastructure from Schneider Electric, France. A code issue vulnerability exists in the Schneider Electric Modicon M340, which can be exploited by an attacker to compile a request to...

Schneider Electric Modicon M340 Path Traversal Vulnerability

The Schneider Electric Modicon M340 is a medium range PLC Programmable Logic Controller for industrial processes and infrastructure from Schneider Electric, France. A path traversal vulnerability exists in the Web Server on Modicon M340 that stems from improperly restricting the pathname of a...

Multiple Schneider Electric Products Code Issue Vulnerabilities

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

Schneider Electric Modicon M340 Code Issue Vulnerability

The Schneider Electric Modicon M340 is a mid-range PLC Programmable Logic Controller for industrial processes and infrastructure from Schneider Electric France. A security vulnerability exists in the Modicon that could be exploited by an attacker to cause a denial of service on the device. The...

Multiple Schneider Electric Products Information Disclosure Vulnerabilities

Schneider Electric Modicon Quantum and others are products of Schneider Electric, France.Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process applications, high availability and safety solutions.Schneider Electric Modicon M340 is a mid-range PLC programmable...

The vulnerability of the microprogramming software for Schneider Electric Modicon Quantum and Schneider Electric Modicon M340 allows a hacker to obtain information about the SMTP server configuration, including user logins and passwords.

The vulnerability of the microprogramming software in Schneider Electric Modicon Quantum and Schneider Electric Modicon M340 controllers is related to security mechanism failures. Exploiting this vulnerability can allow attackers to obtain information about the SMTP server configuration, includin...

Multiple Schneider Electric Product Code Issue Vulnerabilities

Schneider Electric Modicon Premium and others are products of Schneider Electric, France.Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications. The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for...

Multiple Schneider Electric Products Code Issue Vulnerabilities

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...