CVE-2015-7937

Schneider Electric Modicon M340 PLC BMXNOx/BMXPx devices running the GoAhead Web Server are affected by CVE-2015-7937: a stack-based buffer overflow triggered by a long password in HTTP Basic Authentication data, enabling remote code execution. Evidence from multiple sources (NVD entry, ICS-CERT ...

PT-2015-2899 · Schneider Electric +1 · Modicon M340 Plc +1

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices affected versions not specified Description: The issue is caused by a stack-based buffer overflow in the GoAhead Web Server, allowing remote attackers to execute arbitrary code via ...

CVE-2015-7937: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data...

Schneider Electric Patches Buffer Overflow in PLC Line

Automation and energy management company Schneider Electric patched a vulnerability in a product line this week that was leaving a handful of programmable automation controllers at risk of being hacked. Thirteen different builds of the Modicon M340 PLC are affected by the vulnerability, a buffer...

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 programmable logic controller allows a remote intruder to trigger a service failure.

The vulnerability of the embedded software of Schneider Electric’s programmable logic controller Modicon M340 arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause malfunctions by sending specially crafted FTP or...

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 programmable logic controller allows a remote intruder to trigger a service failure.

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to trigger a service failure through a specially crafted FTP traffic...

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 allows a intruder to execute any code they desire.

The vulnerability of the Factory Cast component of the microprogramming software for Schneider Electric’s Modicon M340 programmable logic controllers arises from insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, who operates remotely and has passed...

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 allows a hacker to redirect users to a malicious website.

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 allows a malicious actor to execute a script within the context of the current user’s security, using a specially created website...

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 programmable logic controller allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller is due to authentication deficiencies. Exploiting this vulnerability could allow an attacker to cause malfunctions in service operations or execute arbitrary codes...

Schneider Electric Modicon M340 Buffer Overflow Vulnerability

OVERVIEW David Atch of CyberX has identified a buffer overflow vulnerability in Schneider Electric’s Modicon M340 PLC product line. Schneider Electric has produced a new firmware patch to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Schneider...

Schneider Electric Modicon M340 PLC Station P34 Module HMI Vulnerabilities

Update Vulnerabilities in Schneider Electric SCADA gear remain unpatched close to two weeks after they were disclosed during DEF CON. The Industrial Control System Cyber Emergency Response Team ICS-CERT released an alert late last week and patches are currently being validated according to ICS-CE...

Multiple Schneider Electric Modicon M340 Ethernet Modules Remote Denial of Service

Binary data 7161.pasl...

Schneider Electric Modicon M340 PLC Detection

Binary data 7150.pasl...

Default FTP Credentials (ntpupdate / ntpupdate)

It is possible to log into the remote FTP server by providing default credentials. A remote attacker could exploit this to gain access to the remote server. These credentials are known to apply to Schneider Electric Modicon M340 for Ethernet devices; however, they may apply to other FTP services ...

Schneider Electric Modicon M340 Detection (HTTP)

HTTP based detection of Schneider Electric Modicon M340 devices. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Schneider Modicon M340 Device Default Credentials (HTTP)

The remote Schneider Modicon M340 device is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2013-1323 · Schneider Electric · Modicon M340 +2

Name of the Vulnerable Software and Affected Versions: Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description: The issue is related to errors in security mechanisms, which...