3063 matches found
Design/Logic Flaw
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware version prior to V3.10, Modicon M340 all firmware versions, and Modicon BMxCRA and 140CRA modules all firmware versions, which could cause a Denial of Service attack on the PLC when upgrading...
CVE-2019-6848
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU BMEx58 and Modicon M580 communication module BMENOC0311, BMENOC0321 see notification for version info, which could cause a Denial of Service attack on the PLC when sending specific data on the REST API...
CVE-2019-6848
CVE-2019-6848 affects Schneider Electric’s Modicon M580 family — specifically the CPU BMEx58* and the BMENOC0311/BMENOC0321 communication modules. The root cause is a CWE-755 improper handling of exceptional conditions, which could allow a Denial of Service against the PLC when specific data is s...
CVE-2019-6844
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules all firmware versions, which could cause a Denial of Service atack on the PLC when upgrading the controller with a firmware package containing an invalid we...
CVE-2019-6844
CVE-2019-6844 affects Schneider Electric Modicon M580, M340, BMxCRA and 140CRA PLC modules. The vulnerability is a Denial of Service during firmware upgrade when the firmware image for the web server is invalid and transferred via FTP; a check verifies only image headers, enabling fault state dur...
CVE-2019-6843
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware version prior to V3.10, Modicon M340 all firmware versions, and Modicon BMxCRA and 140CRA modules all firmware versions, which could cause a Denial of Service attack on the PLC when upgrading...
CVE-2019-6843
CVE-2019-6843 affects Schneider Electric Modicon controllers: M580 (firmware before v3.10), M340 (all firmware versions), and BMxCRA/140CRA (all firmware). The root cause is an improper handling during FTP-based firmware upgrades, where an empty firmware image can trigger a recoverable fault, cau...
CVE-2019-6842
CVE-2019-6842 affects Schneider Electric Modicon M580, M340, BMxCRA, and 140CRA firmware. The root cause is improper handling of exceptional conditions in FTP-based firmware upgrade flows, which can cause a Denial of Service, stopping normal device execution after upgrade when the web server imag...
CVE-2019-6841
CVE-2019-6841 affects Schneider Electric Modicon M580 (firmware SV2.80 up to pre-V3.10), M340 (all firmware), and BMxCRA/140CRA modules (all firmware). The issue is a CWE-755 improper handling of exceptional conditions that can cause a Denial of Service when upgrading firmware via FTP with no fir...
Denial of Service Vulnerability in Siemens 1200 PLCs
The Siemens 1200 PLC is a modular general-purpose controller from Siemens for the manufacturing industry. A denial of service vulnerability exists in the Siemens 1200 PLC that can be exploited by an attacker to cause a denial of service...
Schneider Electric Modicon M580 UMAS REST API getcominfo denial-of-service vulnerability
Summary An exploitable denial of service vulnerability exists in the UMAS REST API getcominfo functionality of the Schneider Electric Modicon M580 Programmable Automation Controller firmware version SV2.80. A specially crafted HTTP request can cause the device to enter a non-recoverable fault...
Siemens LOGO!8 PLC < 1.82.02 Improper Restriction within Memory Buffer or Session Fixation DoS (ICSA-19-162-03)
Binary data 720304.prm...
Siemens LOGO! 230RCE PLC Detection
Binary data 765138.prm...
Siemens LOGO! 24CE PLC Detection
Binary data 765135.prm...
Siemens LOGO!8 BM PLC Missing Authentication and Plaintext Storage of a Password (ICSA-19-134-04)
Binary data 720307.prm...
Siemens LOGO! 12/24RCE PLC Detection
Binary data 765136.prm...
Siemens LOGO! 24RCE PLC Detection
Binary data 765137.prm...
Certification Bypass Vulnerability in SIEMENS SIMATIC S7-200 Smart PLCs
Siemens is a leading global technology company providing solutions for customers in the areas of power generation and transmission and distribution, infrastructure, industrial automation, drives and software through innovations in electrification, automation and digitalization. An authentication...