CVE-2013-0663: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote attackers to hijack the authentication of arbitrary...

CVE-2013-0664: Undefined Security Weakness

The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests...

PT-2013-1300

Name of the Vulnerable Software and Affected Versions Schneider Electric Quantum versions 140NOE77111, 140NOE77101, and 140NWM10000 Schneider Electric M340 versions BMXNOC0401, BMXNOE0100x, and BMXNOE011xx Schneider Electric Premium versions TSXETY4103, TSXETY5103, and TSXWMY100 Description A...

PT-2012-1184

Name of the Vulnerable Software and Affected Versions Schneider Electric Modicon Quantum PLC affected versions not specified Schneider Electric Modicon M340 affected versions not specified Description The issue is related to a lack of authentication between the Unity software and the PLC, which c...

PT-2012-1182

Name of the Vulnerable Software and Affected Versions Schneider Electric Modicon Quantum PLC affected versions not specified Schneider Electric Modicon M340 affected versions not specified Description The issue is caused by multiple buffer overflows in the PLC's software, allowing remote attacker...

PT-2012-1183

Name of the Vulnerable Software and Affected Versions Schneider Electric Modicon M340 affected versions not specified Schneider Electric Modicon Quantum PLC affected versions not specified Description The issue is related to insufficient input validation in the software of the programmable logic...

CVE-2011-4859

CVE-2011-4859 concerns the Schneider Electric Quantum Ethernet Module family, where hard-coded credentials exist for 16 accounts (AUTCSE, AUT_CSE, fdrusers, ftpuser, loader, nic2212, nimrohs2212, nip2212, noe77111_v500, ntpupdate, pcfactory, sysdiag, target, test, USER, webserver). This enables r...