Schneider Electric Modicon Modbus Protocol Violation of Secure Design Principles

Binary data 720117.prm...

Schneider Electric X80 RTU Detection

Binary data 762308.prm...

Schneider Electric 140NOE77101 Modicon Quantum Modbus/TCP Network Interface Module

Binary data 751145.prm...

Rockwell Automation Micrologix 1400 <= 21.2 Exploitable Access Control

Binary data 720215.prm...

Buffer overflow

A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLCv2 and OpenPLCv3 versions. It occurs in the modbus.cpp mapUnusedIO function, which can cause a runtime crash of the PLC or possibly have unspecified other impact...

CVE-2018-20818

A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLCv2 and OpenPLCv3 versions. It occurs in the modbus.cpp mapUnusedIO function, which can cause a runtime crash of the PLC or possibly have unspecified other impact...

EasyIO 30P Authentication Bypass / Cross Site Scripting Vulnerabilities

EasyIO 30P versions prior to 2.0.5.27 suffer from authentication bypass and cross site scripting vulnerabilities. EasyIO 30P Authentication Bypass / Cross Site Scripting Vulnerabilities INFORMATION Product: EasyIO 30P http://www.easyio.com Affected versions: 2.0.5.27 tested on version 2.0.5.16 CV...

CVE-2019-6531

An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 if the attacker is in an MITM position...

Design/Logic Flaw

An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 if the attacker is in an MITM position...

CVE-2019-6531

An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 if the attacker is in an MITM position...

CVE-2019-6531

An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 if the attacker is in an MITM position...

CVE-2019-6531

Affected product: Kunbus PR100088 Modbus gateway (all versions prior to Release R02 / Software 1.1.13166). Issue: Information Exposure Through Query Strings in GET Request (CWE-598) allows an MITM attacker to retrieve passwords via an HTTP GET request. Impact: password exposure with high severity...

CVE-2019-6531: Use of GET Request Method With Sensitive Query Strings

An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 if the attacker is in an MITM position...

CVE-2018-16563

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module All versions V4.35, Firmware variant MODBUS TCP for EN100 Ethernet module All versions, Firmware variant DNP3 TCP for EN100 Ethernet module All versions, Firmware variant IEC104 for EN100 Ethernet module A...

CVE-2018-16563

Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays are affected by CVE-2018-16563 due to improper input validation. Specially crafted packets sent to TCP port 102 can cause a denial-of-service, requiring a manual restart to restore EN100 module functionality. Exploitation requires ...

Schneider Electric Modbus Communication DTM Library Detection (Windows SMB Login)

Detects the installed version of Schneider Electric Modbus Communication DTM Library for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Design/Logic Flaw

An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 through FTP...

CVE-2019-6549

An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 through FTP...

CVE-2019-6549

An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166 through FTP...

CVE-2019-6549

CVE-2019-6549 concerns the PR100088 Modbus gateway where plain-text credentials are stored in an XML file and can be retrieved via FTP on all versions prior to Release R02 (or Software Version 1.1.13166). The issue is categorized under Information Exposure Through Get/Internal File Storage, enabl...