Schneider Electric Modicon Buffer Overflow DoS

The vulnerability of the microprogrammed software in Schneider Electric Modicon programmable logic controllers is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger malfunctions during maintenance operations...

Schneider Electric Modicon M340 DoS

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially crafted TCP packet to...

Modicon Unprocessed Exception DoS

The vulnerability of the microprogrammed programmable logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions during the recording of certain application variables using the Modbus protocol in the controller...

Modicon Access Control RCE

The vulnerability of the microprogrammed programmable logic controller Modicon is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by modifying the controller’s configuration using the Modbus protocol...

Modicon software DoS

The vulnerability of the microprogrammed programmable logic controller Modicon is related to insufficient testing of exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause malfunctions by sending specially crafted Modbus packets to the...

Modicon Insufficiently Random Values Intercept TCP Connections

The vulnerability of the microprogrammed programmable logic controller Modicon is related to the use of insufficiently random values. Exploiting this vulnerability could allow a malicious actor to intercept TCP connections remotely...

Modicon Unprocessed Exception DoS

The vulnerability of the microprogrammed logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions by sending inappropriate debugging parameters to the controller using the Modbus protocol...

Modicon ATV IMC PacDrive Authentication Bypass

The vulnerability of microprogrammed software in Modicon, ATV IMC, and PacDrive programmable logic controllers is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to remotely alter the device’s configuration IP address,...

Schneider Electric Modicon Password Change

The vulnerability of the microprogrammed logic controllers from Schneider Electric Modicon relates to deficiencies in the elimination of special symbols. Exploiting this vulnerability can allow an intruder to initiate the password change process for the authenticated user...

Schneider Electric Modicon Password Deletion Access

The vulnerability of the microprogrammed logic controllers from Schneider Electric Modicon lies in the lack of necessary checks during password deletion. Exploiting this vulnerability could allow unauthorized individuals to gain access to the password deletion function of the web server...

Schneider Electric Modicon PLC Multiple Authentication Bypass Vulnerability (CNVD-2017-04918)

Modicon PLCs are programmable controller products used in industries such as dams, energy, food and agriculture, and more. A multiple authentication bypass vulnerability exists in the Schneider Electric Modicon PLC, where an attacker accessing the OT network could intercept traffic to the target...

Schneider Electric Modicon PLC Cross-Site Scripting Vulnerability

Modicon PLCs are programmable controller products used in industries such as dams, energy, food and agriculture, and more. A cross-site scripting vulnerability exists in the implementation of Modicon PLC, which can be exploited by an attacker to construct a specific URL and execute arbitrary Java...