CVE-2020-7549

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules see security notification for affected versions, that could cause denial of HTTP and FTP...

CVE-2020-7543

CVE-2020-7543 affects Schneider Electric Modicon M580, M340, and legacy Quantum/Premium controllers. CWE-754 describes an improper check for unusual or exceptional conditions that could allow a denial of service when a specially crafted Read Physical Memory request is sent over Modbus. Red Hat an...

CVE-2020-7543

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium see security notifications for affected versions, that could cause denial of service when a specially crafted Read Physical Memo...

CVE-2020-7542

The CVE-2020-7542 issue affects Schneider Electric Modicon M580, M340, and Legacy Controllers Quantum and Premium. Root cause: CWE-754 Improper Check for Unusual or Exceptional Conditions, leading to a denial of service when a specially crafted Read Physical Memory request over Modbus is sent to ...

CVE-2020-7542

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium see security notifications for affected versions, that could cause denial of service when a specially crafted Read Physical Memo...

CVE-2020-7541

A CWE-425: Direct Request 'Forced Browsing' vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules see security notification for affected versions, that could cause disclosure of sensitive data when sending a...

CVE-2020-7541

The CVE-2020-7541 issue affects Schneider Electric Modicon devices: Modicon M340 Web Server, Legacy Modicon Quantum and Modicon Premium, and related Communication Modules. It is a CWE-425 Direct Request (Forced Browsing) flaw that could disclose sensitive data when a specially crafted HTTP reques...

CVE-2020-7540

CVE-2020-7540 affects Schneider Electric Modicon Web Server components on Modicon M340, and legacy Modicon Quantum and Premium, plus associated communication modules. The root cause is CWE-306 Missing Authentication for Critical Function, enabling unauthenticated command execution via specially c...

CVE-2020-7540

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules see security notification for affected versions, that could cause unauthenticated command executio...

CVE-2020-7539

CVE-2020-7539 affects the Web Server in Schneider Electric Modicon M340, and legacy Modicon Quantum/Premium with related Communication Modules. The root cause is CWE-754: improper check for unusual or exceptional conditions, leading to denial of service when a specially crafted HTTP packet is sen...

CVE-2020-7539

A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules see security notification for affected versions, that could cause a denial of service...

CVE-2020-7537

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium see security notifications for affected versions, that could cause denial of service when a specially crafted Read Physical Memo...

CVE-2020-7537

CVE-2020-7537 affects Schneider Electric Modicon M580, M340, and legacy Quantum/Premium controllers. The root cause is an improper check for unusual or exceptional conditions (CWE-754) that can allow a remote attacker to trigger denial of service by sending a specially crafted Read Physical Memor...

CVE-2020-7535

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' Vulnerability Type vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules see security notification for affected versions,...

CVE-2020-7535

CVE-2020-7535 describes a CWE-22 path traversal vulnerability in the Web Server of Schneider Electric Modicon M340, including Legacy Offers Modicon Quantum and Modicon Premium and related Communication Modules. The Red Hat/NVD entries and vendor advisories reiterate that sending a specially craft...

CVE-2020-28220

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Modicon M258 Firmware All versions prior to V5.0.4.11 and SoMachine/SoMachine Motion software All versions, that could cause a buffer overflow when the length of a file transferred to the...

CVE-2020-28220

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Modicon M258 Firmware All versions prior to V5.0.4.11 and SoMachine/SoMachine Motion software All versions, that could cause a buffer overflow when the length of a file transferred to the...

CVE-2020-28220

CVE-2020-28220 affects Schneider Electric Modicon M258 firmware (all versions before 5.0.4.11) and SoMachine/SoMachine Motion software (all versions). The issue is a CWE-119 memory-bounds vulnerability that can cause a buffer overflow when the length of a file transferred to the webserver is not ...

CVE-2020-28214

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 all references, all versions, that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictab...

CVE-2020-28214

A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 all references, all versions, that could allow an attacker to pre-compute the hash value using dictionary attack technique such as rainbow tables, effectively disabling the protection that an unpredictab...