Lucene search
K

1669 matches found

BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.2 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to the disclosure of information, allows a intruder to gain access to confidential data.

The vulnerability of the microprogrammed programmable logic controller Modicon relates to the disclosure of information. Exploiting this vulnerability can allow an intruder, operating remotely, to gain access to confidential SNMP protocol information when reading variables in the controller using...

7.5CVSS5.5AI score0.02298EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.3 views

The vulnerability of the microprogrammed logic controller Modicon Quantum, related to errors in code generation, allows a intruder to unauthorizedly modify the built-in software and cause malfunctions during maintenance.

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum is related to errors in code generation. Exploiting this vulnerability allows an intruder to unauthorizedly modify the built-in software and cause malfunctions using the Modbus protocol...

9.1CVSS7.8AI score0.0145EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.4 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to access control errors, allows a intruder to execute arbitrary code.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by modifying the controller’s configuration using the Modbus protocol...

10CVSS6AI score0.08161EPSS
Exploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.3 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions during the recording of certain application variables using the Modbus protocol in the controller...

7.5CVSS5.5AI score0.02236EPSS
Exploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.3 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to the disclosure of information, allows a intruder to gain access to confidential data.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to the disclosure of information. Exploiting this vulnerability can allow an intruder, operating remotely, to gain access to confidential SNMP protocol information by reading memory blocks of the controller...

7.5CVSS5.5AI score0.03279EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.4 views

The vulnerability of the microprogrammed logic controller Modicon, related to errors in handling exceptional situations, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to errors in handling exceptional situations. Exploiting this vulnerability can allow an intruder, operating remotely, to cause malfunctions during the reading of memory blocks with invalid data sizes or wit...

7.5CVSS5.5AI score0.03289EPSS
Exploits1References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.3 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to the violation of trust boundaries, allows a intruder to gain unauthorized access by performing a “forceful” attack against the Modbus protocol.

The vulnerability of the microprogrammed logic controllers from Modicon relates to the violation of trust boundaries during connection. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access by performing a “forceful” attack using the Modbus protocol...

9.8CVSS5.4AI score0.29575EPSS
Exploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.4 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions during maintenance operations when reading invalid blocks of physical memory in the controller using the Modbus...

7.5CVSS5.4AI score0.01821EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.4 views

The vulnerability of the microprogrammed logic controller Modicon, caused by the disclosure of information that allows a intruder to access the information via SNMP.

The vulnerability of the programmable logic controller Modicon’s microprogramming software arises from the exposure of information. Exploiting this vulnerability allows a malicious actor to disclose SNMP information by reading files from the controller via the Modbus protocol...

7.5CVSS5.5AI score0.03413EPSS
Exploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.3 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions during integrity checks of Modbus-protocol files with incorrect check sums...

7.5CVSS5.5AI score0.03289EPSS
Exploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.2 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions by sending inappropriate debugging parameters to the controller using the Modbus protocol...

7.5CVSS5.5AI score0.02304EPSS
Exploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.4 views

The vulnerability of the microprogrammed logic controller Modicon’s software, related to insufficient checking of exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to insufficient testing of exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause malfunctions by sending specially crafted Modbus packets to the...

7.5CVSS5.5AI score0.01129EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.4 views

The vulnerability of the microprogrammed logic controller Modicon, related to bypassing authentication through spoofing, allows a intruder to gain elevated privileges.

The vulnerability of the microprogrammed programmable logic controller Modicon relates to the bypassing of authentication procedures. Exploiting this vulnerability allows a malicious actor to increase their privileges by performing a “brute-force” attack on the Modbus protocol parameters sent to...

9.8CVSS5.5AI score0.35039EPSS
Exploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.5 views

The vulnerability of the microprogrammed logic controllers from Modicon, related to access control errors, allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the programmable logic controller Modicon’s microprogramming software is related to access control errors. Exploiting this vulnerability could allow an intruder to cause service failures or execute arbitrary code by modifying the controller’s configuration using the Modbus...

7.5CVSS5.9AI score0.03808EPSS
Exploits1References3Affected Software2
Talos
Talos
added 2019/06/10 12:0 a.m.150 views

Schneider Electric Modicon M580 UMAS read memory block information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS read memory block function of the Schneider Electric Modicon M580 programmable automation controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to return blocks of memory, resulting...

7.5CVSS7.6AI score0.03279EPSS
Exploits1
Talos
Talos
added 2019/06/10 12:0 a.m.137 views

Schneider Electric Modicon M580 UnityPro reliance on untrusted inputs vulnerability

Summary An exploitable reliance on untrusted inputs vulnerability exists in the strategy transfer function of the Schneider Electric Unity Pro L Programming Software. When a specially crafted strategy is programmed to a Modicon M580 Programmable Automation Controller, and UnityProL is used to rea...

5.3CVSS5.6AI score0.01509EPSS
Exploits0
Talos
Talos
added 2019/06/10 12:0 a.m.219 views

Schneider Electric UnityPro PLC simulator remote code execution vulnerability

Summary An exploitable remote code execution vulnerability exists in the UMAS strategy programming functionality of the Schneider Electric Unity Pro L Programming Software PLC Simulator. A specially crafted sequence of UMAS commands sent to the software’s PLC simulator can cause a modified strate...

9.8CVSS9.9AI score0.08161EPSS
Exploits1
Talos
Talos
added 2019/06/10 12:0 a.m.210 views

Schneider Electric Modicon M580 UMAS read system blocks and bits information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS Read System Blocks and Bits functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to return blocks of...

7.5CVSS7.6AI score0.02298EPSS
Exploits1
Talos
Talos
added 2019/06/10 12:0 a.m.158 views

Schneider Electric Modicon M580 UMAS strategy read information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS strategy read functionality of the Schneider Electric Modicon M580 Programmable Automation Controller firmware version SV2.70. A specially crafted UMAS command can cause the device to return blocks of the programmed...

7.5CVSS7.6AI score0.03413EPSS
Exploits1
Talos
Talos
added 2019/06/10 12:0 a.m.942 views

Schneider Electric Modicon M580 UMAS Read Memory Block Out Of Bounds Information Disclosure Vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS memory block read functionality of the Schneider Electric Modicon M580 Programmable Automation Controller. A specially crafted UMAS request can cause an out of bounds read, resulting in disclosure of sensitive...

7.5CVSS7.7AI score0.03413EPSS
Exploits1
Rows per page
Query Builder