CVE-2019-6820

CVE-2019-6820 describes a CWE-306 vulnerability (Missing Authentication for a Critical Function) that could allow modification of device IP configuration (IP address, netmask, gateway) when a specific Ethernet frame is received on multiple Schneider Electric Modicon/drive products. Affected produ...

CVE-2019-6820

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration IP address, network mask and gateway IP address when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC...

CVE-2019-6820

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration IP address, network mask and gateway IP address when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC...

CVE-2018-7823

CVE-2018-7823 affects Schneider Electric SoMachine Basic (all versions) and Modicon M221 prior to firmware v1.10.0.0, with a vulnerability that could cause remote launch of SoMachine Basic when a crafted Ethernet message is sent. Public sources in the connected documents confirm the affected prod...

CVE-2018-7823

A Environment CWE-2 vulnerability exists in SoMachine Basic, all versions, and Modicon M221all references, all versions prior to firmware V1.10.0.0 which could cause remote launch of SoMachine Basic when sending crafted ethernet message...

CVE-2018-7822

The CVE-2018-7822 entry describes an Incorrect Default Permissions (CWE-276) vulnerability in Schneider Electric SoMachine Basic (all versions) and Modicon M221 prior to firmware v1.10.0.0. The root cause is improper default permissions on SoMachine Basic resource files on the system hosting SoMa...

CVE-2018-7822

An Incorrect Default Permissions CWE-276 vulnerability exists in SoMachine Basic, all versions, and Modicon M221all references, all versions prior to firmware V1.10.0.0 which could cause unauthorized access to SoMachine Basic resource files when logged on the system hosting SoMachine Basic...

CVE-2018-7821

An Environment CWE-2 vulnerability exists in SoMachine Basic, all versions, and Modicon M221all references, all versions prior to firmware V1.10.0.0 which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated...

CVE-2018-7821

An Environment CWE-2 vulnerability exists in SoMachine Basic, all versions, and Modicon M221all references, all versions prior to firmware V1.10.0.0 which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated...

CVE-2018-7821

CVE-2018-7821 affects Schneider Electric SoMachine Basic (all versions) and Modicon M221 prior to firmware v1.10.0.0. The root cause is an environment-type vulnerability that could cause a cycle time impact by flooding the M221 Ethernet interface when the Ethernet/IP adapter is activated. The con...

Modicon M580/M340/Premium/Quantum Improper Exception Checking Vulnerability

Modicon M340 is a programmable controller PLC for complex devices and small to medium-sized projects.Modicon Premium is a programmable controller PLC for complex control.Modicon Quantum is a programmable controller PLC for process control.Modicon M580 is a programmable automation controller PAC...

Schneider Electric Modicon Illegal Breakpoint Parameter Denial of Service Vulnerability

The Schneider Electric Modicon M580, M340 is a programmable automation controller. An illegal breakpoint parameter handling vulnerability exists in the Schneider Electric Modicon M580, M340, which allows remote attackers to exploit the vulnerability by submitting a special request, which can be...

Access Control Error Vulnerability in Multiple Schneider Electric Products

Schneider Electric Modicon M100 is a programmable logic controller, Schneider Electric Modicon LMC078 is a motion controller, and Schneider Electric ATV IMC drive controller is a drive controller. Schneider Electric Modicon M100 is a programmable logic controller.Schneider Electric Modicon LMC078...

Denial of Service Vulnerability in Multiple Schneider Electric Products (CNVD-2019-15891)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

Modicon M580/M340/Premium/Quantum Insufficient Random Value Usage Vulnerability

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

Schneider Electric Modicon Configuration File Override Vulnerability

The Schneider Electric Modicon M580, M340 is a programmable automation controller. A security vulnerability exists in the Schneider Electric Modicon M580, M340 that allows remote attackers to exploit the vulnerability to submit a special request that could overwrite configuration files...

Schneider Electric Modicon Out-of-Bounds Write Denial of Service Vulnerability

The Schneider Electric Modicon M580, M340 is a programmable automation controller. An out-of-bounds write vulnerability exists in the Schneider Electric Modicon M580, M340, which allows remote attackers to exploit the vulnerability by submitting a special request, which can be used in a...

Schneider Electric Modicon Illegal Memory Block Write Denial of Service Vulnerability

The Schneider Electric Modicon M580, M340 is a programmable automation controller. An illegal memory block write vulnerability exists in the Schneider Electric Modicon M580, M340, which allows remote attackers to exploit the vulnerability by submitting a specific request, which can be used in a...

PT-2019-11106

Name of the Vulnerable Software and Affected Versions: Modicon M580 affected versions not specified Modicon M340 affected versions not specified Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description: A denial of service issue exists due to an...

Denial of Service Vulnerability in Multiple Schneider Electric Products (CNVD-2019-15744)

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...