1957 matches found
Default FTP Credentials (ntpupdate / ntpupdate)
It is possible to log into the remote FTP server by providing default credentials. A remote attacker could exploit this to gain access to the remote server. These credentials are known to apply to Schneider Electric Modicon M340 for Ethernet devices; however, they may apply to other FTP services ...
Modicon Modbus/TCP Programming Function Code Access (SCADA) (deprecated)
Binary data 3852.prm...
Schneider Electric PLCs Vulnerabilities
OVERVIEW --------- Begin Update B Part 1 of 2 -------- This updated advisory is a follow-up to the previous advisory update titled ICSA-13-077-01A Schneider Electric PLCs Vulnerabilities Update A that was published March 20, 2013, on the ICS-CERT Web page. It is also a follow-up to the updated...
Schneider Electric Modicon M340 Detection (HTTP)
HTTP based detection of Schneider Electric Modicon M340 devices. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Schneider Modicon M340 Device Default Credentials (HTTP)
The remote Schneider Modicon M340 device is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2013-1323 · Schneider Electric · Modicon M340 +2
Name of the Vulnerable Software and Affected Versions: Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description: The issue is related to errors in security mechanisms, which...
PT-2013-1299
Name of the Vulnerable Software and Affected Versions Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules affected versions not specified Description The issue is caused by a buffer overflow in the software of the Schneider Electric Modicon M340 programmable logic controller. This allow...
PT-2013-1301
Name of the Vulnerable Software and Affected Versions Schneider Electric Quantum versions 140NOE77111 and 140NWM10000 M340 BMXNOE0110x Premium TSXETY5103 Description The issue allows remote authenticated users to execute arbitrary code by sending Modbus messages embedded in SOAP HTTP POST request...
Schneider Modicon SCADA Remote START/STOP Command
A vulnerability has been reported in Schneider Electric Modicon Quantum. The vulnerability is due to the use of unauthenticated administrative function...
Schneider Modicon SCADA Ladder Logic Upload/Download
A vulnerability has been reported in Schneider Electric Modicon Quantum. The vulnerability is due to the use of unauthenticated administrative function...
SCADA Schneider Modicon Quantum Password Recovery
...
Schneider Modicon Remote START/STOP Command
The Schneider Modicon with Unity series of PLCs use Modbus function code 90 0x5a to perform administrative commands without authentication. This module allows a remote user to change the state of the PLC between STOP and RUN, allowing an attacker to end process control by the PLC. This module is...
Schneider Modicon Ladder Logic Upload/Download
The Schneider Modicon with Unity series of PLCs use Modbus function code 90 0x5a to send and receive ladder logic. The protocol is unauthenticated, and allows a rogue host to retrieve the existing logic and to upload new logic. Two modes are supported: "SEND" and "RECV," which behave as one might...
CVE-2012-0929
Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the 1 FTP server or 2 HTTP server...
CVE-2012-0930
Cross-site scripting XSS vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-0931
Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...
Buffer overflow
Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the 1 FTP server or 2 HTTP server...
Authentication flaw
Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...
