Schneider Electric Modicon Configuration File Override Vulnerability

The Schneider Electric Modicon M580, M340 is a programmable automation controller. A security vulnerability exists in the Schneider Electric Modicon M580, M340 that allows remote attackers to exploit the vulnerability to submit a special request that could overwrite configuration files...

Schneider Electric Modicon Illegal Breakpoint Parameter Denial of Service Vulnerability

The Schneider Electric Modicon M580, M340 is a programmable automation controller. An illegal breakpoint parameter handling vulnerability exists in the Schneider Electric Modicon M580, M340, which allows remote attackers to exploit the vulnerability by submitting a special request, which can be...

Modicon M580/M340/Premium/Quantum Improper Exception Checking Vulnerability

Modicon M340 is a programmable controller PLC for complex devices and small to medium-sized projects.Modicon Premium is a programmable controller PLC for complex control.Modicon Quantum is a programmable controller PLC for process control.Modicon M580 is a programmable automation controller PAC...

Modicon M580/M340/Premium/Quantum Insufficient Random Value Usage Vulnerability

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

Schneider Electric Modicon Out-of-Bounds Write Denial of Service Vulnerability

The Schneider Electric Modicon M580, M340 is a programmable automation controller. An out-of-bounds write vulnerability exists in the Schneider Electric Modicon M580, M340, which allows remote attackers to exploit the vulnerability by submitting a special request, which can be used in a...

Schneider Electric Modicon Illegal Memory Block Write Denial of Service Vulnerability

The Schneider Electric Modicon M580, M340 is a programmable automation controller. An illegal memory block write vulnerability exists in the Schneider Electric Modicon M580, M340, which allows remote attackers to exploit the vulnerability by submitting a specific request, which can be used in a...

PT-2019-11106

Name of the Vulnerable Software and Affected Versions: Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description: A denial of service issue exists due to an...

Multiple Schneider Electric Modicon M340 Ethernet Modules Remote Denial of Service

Binary data 38.prm...

Schneider Electric Modicon Controllers

1. EXECUTIVE SUMMARY CVSS v3 5.4 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: Modicon M580, Modicon M340, Modicon Premium, and Modicon Quantum Vulnerability: Use of Insufficiently Random Values 2. RISK EVALUATION Successful exploitation of this...

PT-2019-2284

Name of the Vulnerable Software and Affected Versions Modicon M340 versions prior to V3.01 Modicon M580 versions prior to V2.80 Modicon Quantum all firmware versions Modicon Premium all firmware versions Description A vulnerability exists due to improper check for unusual or exceptional condition...

PT-2019-2342 · Schneider Electric · Modicon M580 +4

Name of the Vulnerable Software and Affected Versions: Modicon M580 versions prior to V2.50 Modicon M340 versions prior to V3.01 BMxCRA312xx versions prior to V2.40 Modicon Premium all firmware versions 140CRA312xxx all firmware versions Description: The issue is related to buffer errors in the...

Modicon M340 BMX P34 CPU Module Detection

Binary data 35.prm...

Schneider Electric Modicon M340 Controllers Denial of Service

Binary data 720112.prm...

Schneider Electric Modicon M340 PLCs Buffer Overflow

Binary data 720075.prm...

Schneider Electric Modicon M340, Premium, Quantum PLC and BMXNOR0200 Information Disclosure Vulnerability

Schneider Electric Modicon M340, etc. are programmable logic controller products of Schneider Electric France. An information disclosure vulnerability exists in the embedded web server in the Modicon M340, Premium, Quantum PLC, and BMXNOR0200, which can be exploited by an attacker to obtain...

CVE-2018-7833

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable...

CVE-2018-7812

An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where the web server sends different responses in a way that exposes security-relevant information about the state of the product, such as whether...

Information disclosure

An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where the web server sends different responses in a way that exposes security-relevant information about the state of the product, such as whether...

Input validation

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable...

Design/Logic Flaw

A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially crafted link can be redirected to a URL of the attacker's choosing...