PT-2019-2342 · Schneider Electric · Modicon M580 +4

Name of the Vulnerable Software and Affected Versions: Modicon M580 versions prior to V2.50 Modicon M340 versions prior to V3.01 BMxCRA312xx versions prior to V2.40 Modicon Premium all firmware versions 140CRA312xxx all firmware versions Description: The issue is related to buffer errors in the...

PT-2019-2334

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists that could cause a...

PT-2019-2278

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A reliance on untrusted inputs in a security...

PT-2019-2275

Name of the Vulnerable Software and Affected Versions Modicon M580 versions affected versions not specified Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description The issue...

PT-2019-2283

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to V2.30 Modicon M340 affected versions not specified Modicon Premium affected versions not specified Modicon Quantum affected versions not specified Description The issue is related to the use of insufficiently...

PT-2019-2272

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists in the Modicon...

PT-2019-2271

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists that could cause an...

PT-2019-2273

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A CWE-125: Out-of-bounds Read issue exists,...

PT-2019-2335

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A remote code execution issue exists due to...

PT-2019-2333

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description The issue is related to the disclosure of...

PT-2019-2274

Name of the Vulnerable Software and Affected Versions Modicon M580 versions affected versions not specified Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description The issue...

PT-2019-2332

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists that could cause the...

PT-2019-2281

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to a fixed version Modicon M340 versions prior to a fixed version Modicon Quantum versions prior to a fixed version Modicon Premium versions prior to a fixed version Description The issue is related to an uncaught...

PT-2019-2279

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description The issue is related to an uncaught exception...

PT-2019-2280

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description A vulnerability exists in the software of the...

PT-2019-2277

Name of the Vulnerable Software and Affected Versions Modicon M580 versions affected versions not specified Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description The issue...

CVE-2018-7833: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable...

CVE-2018-7809: Weak Password Recovery Mechanism for Forgotten Password

An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the password delete function of the web server...

PT-2018-3117

Name of the Vulnerable Software and Affected Versions Modicon M340, Modicon Quantum, and Modicon Premium affected versions not specified Description The issue is related to the implementation of the FTP protocol in the firmware of Modicon M340, Modicon Quantum, and Modicon Premium programmable...

The vulnerability of FTP servers of microprogrammed logic controllers from Schneider Electric—Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200—allows attackers to select passwords.

The vulnerability of FTP servers of microprogrammed logic controllers from Schneider Electric, such as Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200, is related to errors in the implementation of cryptographic algorithms. Exploiting this vulnerability can allow an attacker to...