CVE-2019-6845

The CVE-2019-6845 vulnerability affects Schneider Electric Modicon M580 (and related models) due to cleartext transmission of sensitive information via UMAS, and is tied to FTP/TFTP and device programming data paths. Talos reports an exploitable information-disclosure in UMAS with cleartext trans...

CVE-2019-6845

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol...

PT-2019-18376

Name of the Vulnerable Software and Affected Versions Modicon M580 all firmware versions Modicon M340 all firmware versions Modicon Premium all firmware versions Modicon Quantum all firmware versions Description A File and Directory Information Exposure issue exists, which could cause the...

CVE-2019-6851: Insertion of Sensitive Information into Externally-Accessible File or Directory

A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information from the controller when using TFTP protocol...

CVE-2019-6845: Cleartext Transmission of Sensitive Information

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol...

PT-2019-3857

Name of the Vulnerable Software and Affected Versions Modicon M580 all firmware versions Modicon M340 all firmware versions Modicon Premium all firmware versions Modicon Quantum all firmware versions Description A Cleartext Transmission of Sensitive Information issue exists, which could cause the...

CVE-2019-6828

A CWE-248: Uncaught Exception vulnerability exists Modicon M580 firmware version prior to V2.90, Modicon M340 firmware version prior to V3.10, Modicon Premium all versions, and Modicon Quantum all versions, which could cause a possible denial of service when reading specific coils and registers i...

CVE-2019-6809

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 firmware versions prior to V2.90, Modicon M340 firmware versions prior to V3.10, Modicon Premium all versions, Modicon Quantum all versions, which could cause a possible denial of service when reading invalid data from the...

CVE-2019-6809

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 firmware versions prior to V2.90, Modicon M340 firmware versions prior to V3.10, Modicon Premium all versions, Modicon Quantum all versions, which could cause a possible denial of service when reading invalid data from the...

Design/Logic Flaw

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 firmware versions prior to V2.90, Modicon M340 firmware versions prior to V3.10, Modicon Premium all versions, Modicon Quantum all versions, which could cause a possible denial of service when reading invalid data from the...

CVE-2019-6828

CVE-2019-6828 describes an unhandled exception vulnerability (CWE-248) in Schneider Electric Modicon controllers that could cause a denial of service when reading coils and registers over Modbus. Affected products include Modicon M580 (firmware version before v2.90), Modicon M340 (before v3.10), ...

CVE-2019-6828

A CWE-248: Uncaught Exception vulnerability exists Modicon M580 firmware version prior to V2.90, Modicon M340 firmware version prior to V3.10, Modicon Premium all versions, and Modicon Quantum all versions, which could cause a possible denial of service when reading specific coils and registers i...

CVE-2019-6809

The CVE affects Schneider Electric Modicon PLCs: M580 (firmware before V2.90), M340 (before V3.10), Premium (all), and Quantum (all). Root cause is CWE-248 Uncaught Exception leading to denial of service when handling invalid data/commands via Modbus/UMAS. Public details in TALOS describe an expl...

PT-2019-18364

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to V2.90 Modicon M340 versions prior to V3.10 Modicon Premium affected versions not specified Modicon Quantum affected versions not specified Description A denial of service issue exists due to an uncaught exception...

CVE-2019-6809: Uncaught Exception

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 firmware versions prior to V2.90, Modicon M340 firmware versions prior to V3.10, Modicon Premium all versions, Modicon Quantum all versions, which could cause a possible denial of service when reading invalid data from the...

CVE-2019-6828: Uncaught Exception

A CWE-248: Uncaught Exception vulnerability exists Modicon M580 firmware version prior to V2.90, Modicon M340 firmware version prior to V3.10, Modicon Premium all versions, and Modicon Quantum all versions, which could cause a possible denial of service when reading specific coils and registers i...

PT-2019-18366

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to V2.90 Modicon M340 versions prior to V3.10 Modicon Premium affected versions not specified Modicon Quantum affected versions not specified Description A vulnerability exists that could cause a possible denial of...

Buffer Overflow Vulnerability in Multiple Schneider Electric Products (CNVD-2019-45192)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

Multiple Schneider Electric Products Input Validation Error Vulnerability

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

Multiple Schneider Electric Products Information Disclosure Vulnerability (CNVD-2019-34828)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...