Lucene search
+L

1957 matches found

CVE
CVE
•added 2021/09/02 4:52 p.m.•75 views

CVE-2021-22790

CVE-2021-22790 is an out-of-bounds read (CWE-125) vulnerability affecting Schneider Electric Modicon/M580/M340/MC80/Momentum Ethernet/Quantum/Premium CPUs and PLC simulators, triggered by a specially crafted project file. Root cause: out-of-bounds read could cause Denial of Service on Modicon PLC...

6.5CVSS6.4AI score0.00839EPSS
SaveExploits0References2Affected Software49
Vulnrichment
Vulnrichment
•added 2021/09/02 4:52 p.m.•13 views

CVE-2021-22790

A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU part...

7AI score0.00839EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/09/02 4:52 p.m.•59 views

CVE-2021-22789

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BM...

6.6AI score0.00839EPSS
SaveExploits0References1
CVE
CVE
•added 2021/09/02 4:52 p.m.•74 views

CVE-2021-22789

The CVE-2021-22789 entry describes a CWE-119 buffer-boundary vulnerability that could cause a Denial of Service in Schneider Electric Modicon PLCs when updating the controller application with a specially crafted project file. Affected products include Modicon M580 CPU (BMEP*/BMEH*), M340 (BMXP34...

6.5CVSS6.4AI score0.00839EPSS
SaveExploits0References1Affected Software49
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/02 12:00 a.m.•5 views

CVE-2021-22792: NULL Pointer Dereference

A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU par...

7.5CVSS5.7AI score0.00937EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/02 12:00 a.m.•6 views

CVE-2021-22791: Out-of-bounds Write

A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU part...

6.5CVSS5.7AI score0.00839EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/02 12:00 a.m.•5 views

CVE-2021-22790: Out-of-bounds Read

A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU part...

6.5CVSS5.7AI score0.00839EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/02 12:00 a.m.•4 views

CVE-2021-22789: Improper Restriction of Operations within the Bounds of a Memory Buffer

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BM...

6.5CVSS5.7AI score0.00839EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/09/02 12:00 a.m.•14 views

Schneider Electric Modicon M580 CPU 代码问题漏洞

The Schneider Electric Modicon M580 CPU is a processor module for the M580 Ethernet programmable automation controller from Schneider Electric, France. A code issue vulnerability exists in the Schneider Electric Modicon M580 CPU that stems from the presence of a null pointer dereference in the...

7.5CVSS7.6AI score0.00937EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/09/02 12:00 a.m.•15 views

Schneider Electric Modicon M580 CPU 缓冲区错误漏洞

The Schneider Electric Modicon M580 CPU is a processor module for the M580 Ethernet programmable automation controller from Schneider Electric, France. A security vulnerability exists in the Schneider Electric Modicon M580 CPU that originates from an out-of-bounds read in the Modicon M580 CPU par...

6.5CVSS7.1AI score0.00839EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/09/02 12:00 a.m.•18 views

Schneider Electric Modicon M580 CPU 缓冲区错误漏洞

The Schneider Electric Modicon M580 CPU is a processor module for an M580 Ethernet programmable automation controller from Schneider Electric France. A buffer error vulnerability exists in the Schneider Electric Modicon M580 CPU that stems from the presence of an improperly restricted operation...

6.5CVSS7.3AI score0.00839EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/09/02 12:00 a.m.•17 views

多款 Schneider Electric 产品缓冲区错误漏洞

Schneider Electric Modicon M580 and others are products of Schneider Electric, France.Schneider Electric Modicon M580 is a programmable automation controller.Schneider Electric Modicon A buffer error vulnerability exists in multiple Schneider Electric products and originates from the controller...

6.5CVSS7.3AI score0.00839EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/09/02 12:00 a.m.•15 views

The vulnerability of the RTU module’s microprogramming software, Modicon BMXNOR0200H, due to lack of access control mechanisms, allows intruders to gain increased privileges.

The vulnerability of the RTU module’s microprogramming software, Modicon BMXNOR0200H, is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker operating remotely to enhance their privileges...

8.6CVSS7.6AI score0.01729EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/09/02 12:00 a.m.•17 views

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the insufficient checking of unusual or exceptional states. This allows a intruder to trigger a malfunction in maintenance by using a specially crafted HTTP packet.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow an attacker operating remotely...

7.8CVSS7.2AI score0.01196EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/09/02 12:00 a.m.•19 views

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium lies in insufficient testing for unusual or exceptional states. This allows a intruder to trigger malfunctions during maintenance.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium lies in insufficient testing for unusual or exceptional states. Exploiting this vulnerability can allow an attacker operati...

7.8CVSS7.2AI score0.01399EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/09/02 12:00 a.m.•17 views

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the ability to disclose information, allowing unauthorized access to protected data.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium is related to the disclosure of information. Exploiting this vulnerability can allow unauthorized individuals to gain unauthorized access...

7.8CVSS7.2AI score0.01379EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/09/02 12:00 a.m.•18 views

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the absence of authentication for a critical function, allowing attackers to execute arbitrary commands.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the absence of authentication for critical functions. Exploiting this vulnerability allows an attacker operating remotely to...

8.5CVSS8AI score0.02317EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/09/02 12:00 a.m.•15 views

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers Modicon M221, M100, and M200 relates to the disclosure of information, which allows unauthorized access to protected data by attackers.

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M221, M100, and M200 programmable logic controllers is related to the disclosure of information. Exploiting this vulnerability can allow an intruder operating remotely to gain unauthorized access to protected...

3.1CVSS5.5AI score0.00527EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/09/02 12:00 a.m.•16 views

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controllers lies in the insufficient checking of unusual or exceptional states. This allows a intruder to trigger a malfunction during maintenance.

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause malfunctions during maintenance operations...

7.8CVSS7.2AI score0.01169EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/08/31 12:00 a.m.•13 views

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers Modicon M221, M100, and M200 stems from the lack of encryption measures for protected data. This allows attackers to obtain the encryption key.

The vulnerability of the microprogrammed logic controllers from Schneider Electric, such as Modicon M221, M100, and M200, is related to the lack of encryption measures for protected data. Exploiting this vulnerability can allow a remote attacker to obtain the encryption key...

7.8CVSS6.1AI score0.00206EPSS
SaveExploits0References2
Rows per page
Query Builder